c52423a7641cb6c932fb45b9827685ab13c2028a783ad930b90560e42db5c1cd

Analysis

max time kernel
284s
max time network
289s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
01-03-2023 16:34

Target

SynapseCrack/bin/CefSharp.Core.dll
Size

1.3MB
MD5

a44554d38b7a25a7ab2320fe731c5298
SHA1

c287a88fd3a064b387888f4bbc37a0630c877253
SHA256

35980974bdba6d5dd6a4dc1072e33aab77f72f56c46779cb0216e4801dcc36ab
SHA512

bd8956b7e8ca6d1129fbbb950dd913183b3e92601c2c900aed26d695782e4663654ac57074e1f0f2efcf9cced969487162910dc9bb52b42572d61994b07f2aad
SSDEEP

24576:yXIdphyvfDVKyFnp89jCbBNr0s7HQAqcwYhPolDexla9e6dhkOi0nK+++evP4ZcC:HsJKyzNr0s7HQAqcwYhPolDexla9e6dp

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

rundll32.exe

description	pid	process	target process
PID 3820 wrote to memory of 4752	3820	rundll32.exe	rundll32.exe
PID 3820 wrote to memory of 4752	3820	rundll32.exe	rundll32.exe
PID 3820 wrote to memory of 4752	3820	rundll32.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\SynapseCrack\bin\CefSharp.Core.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3820

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\SynapseCrack\bin\CefSharp.Core.dll,#1
2⤵
PID:4752