5f919b98fe0692407761b9fbc869cfd47cecf3d7386ae340a16f04af4673c2ba

Analysis

max time kernel
42s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
03-02-2023 18:53

Target

040aecd723be3d1660473cf075c641d80f3ea19e.dll
Size

1.7MB
MD5

37c3245c8ae6b76f1394210ed66af190
SHA1

040aecd723be3d1660473cf075c641d80f3ea19e
SHA256

5f919b98fe0692407761b9fbc869cfd47cecf3d7386ae340a16f04af4673c2ba
SHA512

1aaeb3c08c4a71d93c8f5f007c543c0164e1071113cb29033d4fe2c8fd2a36c6115bd121d877d6da471014656866208599734bef99f6a5d4f496658d301b4acc
SSDEEP

24576:zrj3nPW3ednWPiT8VTBqcATV8KIyydLXGcq8z+0uaEYmgEJ/tc1:T3nCeCiT8aHxyM18z+XatEJ1

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
944	960	WerFault.exe	27

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 1076 wrote to memory of 960	1076	rundll32.exe	27
PID 1076 wrote to memory of 960	1076	rundll32.exe	27
PID 1076 wrote to memory of 960	1076	rundll32.exe	27
PID 1076 wrote to memory of 960	1076	rundll32.exe	27
PID 1076 wrote to memory of 960	1076	rundll32.exe	27
PID 1076 wrote to memory of 960	1076	rundll32.exe	27
PID 1076 wrote to memory of 960	1076	rundll32.exe	27
PID 960 wrote to memory of 944	960	rundll32.exe	28
PID 960 wrote to memory of 944	960	rundll32.exe	28
PID 960 wrote to memory of 944	960	rundll32.exe	28
PID 960 wrote to memory of 944	960	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\040aecd723be3d1660473cf075c641d80f3ea19e.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1076
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\040aecd723be3d1660473cf075c641d80f3ea19e.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:960
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 960 -s 228
    3⤵
    - Program crash
    PID:944

memory/960-55-0x0000000075141000-0x0000000075143000-memory.dmp

Filesize
8KB

Download