b628963fd2d5a7458466966c01c09615a64f112b5ce6e8ad0fabb7dd7e29c0f8

Analysis

max time kernel
17s
max time network
32s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
06-12-2022 15:07

Target

b628963fd2d5a7458466966c01c09615a64f112b5ce6e8ad0fabb7dd7e29c0f8.dll
Size

78KB
MD5

69dd16ed5d913c8814826d70682f3115
SHA1

b180535cf70c41dd4b1de0a061202b4675f67cb3
SHA256

b628963fd2d5a7458466966c01c09615a64f112b5ce6e8ad0fabb7dd7e29c0f8
SHA512

54e3443ec1394c3f056b1ca4a2a1b9047dcc021b31f0fb2a1d1a7017049a276d4f53b169259077b44985bd441db2fb549ebe8548e94a57ca0c0aa496448fbab3
SSDEEP

1536:GpHzfzXNa8RyA1DecJvW7xL0454HleWqWirEr0VOmFZd6JBwAwgsAITqHk/RBJYz:GpTfzE0xd/JuF2oHEmF6JBwAlJj8RbQ

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 1748 wrote to memory of 2036	1748	rundll32.exe	28
PID 1748 wrote to memory of 2036	1748	rundll32.exe	28
PID 1748 wrote to memory of 2036	1748	rundll32.exe	28
PID 1748 wrote to memory of 2036	1748	rundll32.exe	28
PID 1748 wrote to memory of 2036	1748	rundll32.exe	28
PID 1748 wrote to memory of 2036	1748	rundll32.exe	28
PID 1748 wrote to memory of 2036	1748	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\b628963fd2d5a7458466966c01c09615a64f112b5ce6e8ad0fabb7dd7e29c0f8.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1748
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\b628963fd2d5a7458466966c01c09615a64f112b5ce6e8ad0fabb7dd7e29c0f8.dll,#1
  2⤵
  PID:2036

memory/2036-55-0x0000000076381000-0x0000000076383000-memory.dmp

Filesize
8KB

Download
memory/2036-56-0x00000000001E0000-0x00000000001F3000-memory.dmp

Filesize
76KB

Download
memory/2036-57-0x00000000001E0000-0x00000000001F3000-memory.dmp

Filesize
76KB

Download
memory/2036-58-0x00000000001E0000-0x00000000001F3000-memory.dmp

Filesize
76KB

Download
memory/2036-59-0x0000000040960000-0x0000000040971000-memory.dmp

Filesize
68KB

Download