36ea7419c9c4ef2330590eb5f3b6e23b28972ef5e4859133e2105cb205eecf37

Analysis

max time kernel
112s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
06/12/2022, 13:43

Target

36ea7419c9c4ef2330590eb5f3b6e23b28972ef5e4859133e2105cb205eecf37.dll
Size

52KB
MD5

f7fa957d962af2fe620f185725a41439
SHA1

c59018762def87b2ad14ee9406c4ac076229a7ad
SHA256

36ea7419c9c4ef2330590eb5f3b6e23b28972ef5e4859133e2105cb205eecf37
SHA512

6f21a69230bdbe6cacf1ede859e3d1a9eee5fd4d779ef392a63f52902050e2baf8af24a4a9be520cbf5bb4df9203d8aea9d7ad1fd174c0bc97819496998cda00
SSDEEP

768:GZMTBFOfVsmVd5hoSCIJFrwHPjjM7VvUwD7ZAKQCPGx:PT8VLVd5hoSCIJFAPPnwhXG

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2952 wrote to memory of 2556	2952	rundll32.exe	81
PID 2952 wrote to memory of 2556	2952	rundll32.exe	81
PID 2952 wrote to memory of 2556	2952	rundll32.exe	81

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\36ea7419c9c4ef2330590eb5f3b6e23b28972ef5e4859133e2105cb205eecf37.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2952
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\36ea7419c9c4ef2330590eb5f3b6e23b28972ef5e4859133e2105cb205eecf37.dll,#1
  2⤵
  PID:2556