8fc521653d7167d4339a6a158def934c8fa46d7f3c75eb1d3420f53069128561

Analysis

max time kernel
91s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
01-02-2023 01:47

Target

Driver Booster/IObit Driver Booster Pro 9.0.1.104/Crack-Demoncrazy ツ/madExcept_.dll
Size

435KB
MD5

bb4a5b4f2e851ec94234d1042bca1016
SHA1

f061b51e42d2c949525c5686dea8990f9891dda5
SHA256

83c5c3528b0fefd71c65b510dba02263a56a706ca146a286ba9e229a13d16eb8
SHA512

fe32eece132b7a9d87198e842abc6c00e0baf1caab9068669b938b3790903d1805d7a7fd00cd8d7b883b2848bcd2a849d8495b3eb8f4bae50ff7a879bc78039b
SSDEEP

6144:6lAz49EKhEV30F8sl88nTjQ4Q50gEcW/jd+o72niVFNMa4Yn22LY:6lG4ut30F8slzYlQcW/jd++2nQ6u2OY

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2224 wrote to memory of 1156	2224	rundll32.exe	79
PID 2224 wrote to memory of 1156	2224	rundll32.exe	79
PID 2224 wrote to memory of 1156	2224	rundll32.exe	79

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Driver Booster\IObit Driver Booster Pro 9.0.1.104\Crack-Demoncrazy ツ\madExcept_.dll",#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2224
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Driver Booster\IObit Driver Booster Pro 9.0.1.104\Crack-Demoncrazy ツ\madExcept_.dll",#1
  2⤵
  PID:1156