6ecff9d04bda4d4149f1a78486ede32e15a36b9d94fce5509467b3af1feede01

Analysis

max time kernel
85s
max time network
167s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
15-12-2022 17:16

Target

VirtualBox-7.0.2-154219-Win/x86/ACE.dll
Size

1.1MB
MD5

d0ae82cdf9911bec3eddda128602af04
SHA1

58e167521f2b028d03aeb6c926d34c2c969fa9c6
SHA256

f9675304d13efaee32e6b4a3317b64231a59b684532a898d12b4e7ed88518afd
SHA512

c1520462a8e02ab09e2a101207e88cf6861b48c32b7c2523047251496479740a84987fb19aba4dc8610abe2c81e5f7dbc80c51b8667f4953e17dda583d27557d
SSDEEP

24576:tmGLzPLOXbuKR17zBXE+MXRHRg2yTEg863NzSxoopoo+F:v3jOyY7zB0+MXRHRg2iBrdzSqF

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3360 wrote to memory of 3200	3360	rundll32.exe	83
PID 3360 wrote to memory of 3200	3360	rundll32.exe	83
PID 3360 wrote to memory of 3200	3360	rundll32.exe	83

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\VirtualBox-7.0.2-154219-Win\x86\ACE.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3360
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\VirtualBox-7.0.2-154219-Win\x86\ACE.dll,#1
  2⤵
  PID:3200