cb1dc100ea6157653a7679c52b54f376b5dad58c0dc554e1e6075b6cb843b778

Analysis

max time kernel
41s
max time network
46s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
06/12/2022, 19:25

Target

cb1dc100ea6157653a7679c52b54f376b5dad58c0dc554e1e6075b6cb843b778.dll
Size

68KB
MD5

2a4e71611592169da219eb7443ed24fa
SHA1

d5d7ac604bb410ce494499c7774f9eeeb9826be3
SHA256

cb1dc100ea6157653a7679c52b54f376b5dad58c0dc554e1e6075b6cb843b778
SHA512

c83b66aa5ce0d1dd0f5e1ad6c1d5ada04159fd15b81499cd4b25421c8bba5d6ed305fccd1940073bb0c55c71dc8d905eefb26e966b163e13bcc610e8a1637ac9
SSDEEP

1536:71Dz04FE/PKhhU16bhFqPlJoeGOX0YoSQYBabEXFCtEY+yl:7xz0I0nX0QbabKForl

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1264	1260	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 1632 wrote to memory of 1260	1632	rundll32.exe	28
PID 1632 wrote to memory of 1260	1632	rundll32.exe	28
PID 1632 wrote to memory of 1260	1632	rundll32.exe	28
PID 1632 wrote to memory of 1260	1632	rundll32.exe	28
PID 1632 wrote to memory of 1260	1632	rundll32.exe	28
PID 1632 wrote to memory of 1260	1632	rundll32.exe	28
PID 1632 wrote to memory of 1260	1632	rundll32.exe	28
PID 1260 wrote to memory of 1264	1260	rundll32.exe	29
PID 1260 wrote to memory of 1264	1260	rundll32.exe	29
PID 1260 wrote to memory of 1264	1260	rundll32.exe	29
PID 1260 wrote to memory of 1264	1260	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\cb1dc100ea6157653a7679c52b54f376b5dad58c0dc554e1e6075b6cb843b778.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1632
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\cb1dc100ea6157653a7679c52b54f376b5dad58c0dc554e1e6075b6cb843b778.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1260
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 1260 -s 236
    3⤵
    - Program crash
    PID:1264

memory/1260-55-0x0000000076BA1000-0x0000000076BA3000-memory.dmp

Filesize
8KB

Download