b7c5621a07a840245f2058f900f48495e8eeb61cd566e96b9c94d6e04ab44347

Analysis

max time kernel
43s
max time network
50s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
05-12-2022 07:59

Target

b7c5621a07a840245f2058f900f48495e8eeb61cd566e96b9c94d6e04ab44347.dll
Size

34KB
MD5

9c02235075c8a9b91ab957ba23b216b0
SHA1

dc72792b6602f5ebbde1bb79325428341f210a18
SHA256

b7c5621a07a840245f2058f900f48495e8eeb61cd566e96b9c94d6e04ab44347
SHA512

7663847ca2aaf526bee0c78ce194c1019a849626492df67df93eba24a8f173ea72792c4d07390c9684f1a65715f7034402e6ffd9f348ecf3451a888d68857912
SSDEEP

768:z/5EAZZWi3btVViGHVEHWXGT7nKEglw3VsApGzV:2Az1LLoAVaIApGzV

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 620 wrote to memory of 1708	620	rundll32.exe	27
PID 620 wrote to memory of 1708	620	rundll32.exe	27
PID 620 wrote to memory of 1708	620	rundll32.exe	27
PID 620 wrote to memory of 1708	620	rundll32.exe	27
PID 620 wrote to memory of 1708	620	rundll32.exe	27
PID 620 wrote to memory of 1708	620	rundll32.exe	27
PID 620 wrote to memory of 1708	620	rundll32.exe	27

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\b7c5621a07a840245f2058f900f48495e8eeb61cd566e96b9c94d6e04ab44347.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:620
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\b7c5621a07a840245f2058f900f48495e8eeb61cd566e96b9c94d6e04ab44347.dll,#1
  2⤵
  PID:1708

memory/1708-54-0x0000000000000000-mapping.dmp

Download
memory/1708-55-0x0000000075711000-0x0000000075713000-memory.dmp

Filesize
8KB

Download
memory/1708-56-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/1708-57-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/1708-58-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download
memory/1708-59-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download