dc2ec24a09dd90d7cab3810a78be3639c29c4efb135dba7d949fa5863629ea56

Analysis

max time kernel
167s
max time network
193s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
06-12-2022 21:29

Target

dc2ec24a09dd90d7cab3810a78be3639c29c4efb135dba7d949fa5863629ea56.dll
Size

35KB
MD5

9354d45b56fa75cca8f977be3b521033
SHA1

4782cb3c41067ba4da316c7c72639792dd255574
SHA256

dc2ec24a09dd90d7cab3810a78be3639c29c4efb135dba7d949fa5863629ea56
SHA512

6b4b7319dab3f5ed8f589b679432f440108c5f06f7793474b76526fcc5c61a9e77bea706542758a042870fa8a530f60ccaf7265b68248fc11b61e2ac36a9f083
SSDEEP

768:zPfBvZHWGwuT+dnls7QQnXbJgv3/CODbEiRVcwv:TBv7T+B67QCXbJgv6OEiRGa

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1752 wrote to memory of 3276	1752	rundll32.exe	82
PID 1752 wrote to memory of 3276	1752	rundll32.exe	82
PID 1752 wrote to memory of 3276	1752	rundll32.exe	82

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\dc2ec24a09dd90d7cab3810a78be3639c29c4efb135dba7d949fa5863629ea56.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1752
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\dc2ec24a09dd90d7cab3810a78be3639c29c4efb135dba7d949fa5863629ea56.dll,#1
  2⤵
  PID:3276