9568eabcfba41591a041b3737c967b3d0815d2041a3420f149b1ceb942349380

Analysis

max time kernel
112s
max time network
135s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
06/12/2022, 01:15 UTC

Target

9568eabcfba41591a041b3737c967b3d0815d2041a3420f149b1ceb942349380.dll
Size

6KB
MD5

13f42cd49c375ee98713edee015a52d0
SHA1

7b2f3cef8210eaff0aee60b2db2897f4c9fdbacf
SHA256

9568eabcfba41591a041b3737c967b3d0815d2041a3420f149b1ceb942349380
SHA512

dd57e77a4ed76724554b4809e1e1032b117a33d1d179e219f2e5efa13a9588dc7b54b96b67d35c9377d023ddb41157cbcae4722546037b980f6ad73d58e50751
SSDEEP

96:hyZxm/jmjhjvj3jcZGV4ZcccVcccU3Gvocc2R+acccGZ:2M/SdjbgYkcccVccca6occ/acccQ

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4868 wrote to memory of 4972	4868	rundll32.exe	81
PID 4868 wrote to memory of 4972	4868	rundll32.exe	81
PID 4868 wrote to memory of 4972	4868	rundll32.exe	81

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\9568eabcfba41591a041b3737c967b3d0815d2041a3420f149b1ceb942349380.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4868
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\9568eabcfba41591a041b3737c967b3d0815d2041a3420f149b1ceb942349380.dll,#1
  2⤵
  PID:4972

No results found