9529aaa918728f6774a215ff786c930029c3edebcb7e3c018e79d5ecd0ed595f

Analysis

max time kernel
14s
max time network
32s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
06/12/2022, 09:10

Target

9529aaa918728f6774a215ff786c930029c3edebcb7e3c018e79d5ecd0ed595f.dll
Size

80KB
MD5

c987d070518d5a06624e2db613670c89
SHA1

9f0ccac108f457d5b3aa54bd4cec05ca0facb3a1
SHA256

9529aaa918728f6774a215ff786c930029c3edebcb7e3c018e79d5ecd0ed595f
SHA512

1699ec95a9a01c35abdec4f836cc9543762074ff4e2923e4f82ca349a13d3bbec2ad37ce44a07342372061bd43ce165d3062360611a972d438bb2ace0f46375f
SSDEEP

1536:vkLciCBVJ8BrPK/WPcIMeitBNZfQZ/uiQ0WMWMN11arJ5qjBgQGfC2b1dVC0CGN:vkL7CBVJiPK/WQTS/s0WMnN11i5q1qak

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 1808 wrote to memory of 2028	1808	rundll32.exe	28
PID 1808 wrote to memory of 2028	1808	rundll32.exe	28
PID 1808 wrote to memory of 2028	1808	rundll32.exe	28
PID 1808 wrote to memory of 2028	1808	rundll32.exe	28
PID 1808 wrote to memory of 2028	1808	rundll32.exe	28
PID 1808 wrote to memory of 2028	1808	rundll32.exe	28
PID 1808 wrote to memory of 2028	1808	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\9529aaa918728f6774a215ff786c930029c3edebcb7e3c018e79d5ecd0ed595f.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1808
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\9529aaa918728f6774a215ff786c930029c3edebcb7e3c018e79d5ecd0ed595f.dll,#1
  2⤵
  PID:2028

memory/2028-55-0x0000000075511000-0x0000000075513000-memory.dmp

Filesize
8KB

Download
memory/2028-56-0x0000000010000000-0x0000000010023000-memory.dmp

Filesize
140KB

Download
memory/2028-57-0x0000000010000000-0x0000000010023000-memory.dmp

Filesize
140KB

Download
memory/2028-58-0x0000000010000000-0x0000000010023000-memory.dmp

Filesize
140KB

Download
memory/2028-59-0x0000000000120000-0x0000000000125000-memory.dmp

Filesize
20KB

Download