c52423a7641cb6c932fb45b9827685ab13c2028a783ad930b90560e42db5c1cd

Analysis

max time kernel
291s
max time network
297s
platform
windows10-2004_x64
resource
win10v2004-20230221-en
resource tags

arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
submitted
01-03-2023 16:34

Target

SynapseCrack/bin/CefSharp.Wpf.dll
Size

83KB
MD5

1533d9b2ed991ad4fecef548dc762565
SHA1

7a0664cc6bdc5ffd23c4aba43fa7b2acdfe949f4
SHA256

8e6e874d51f654c1c081cd1658a2e4ad8e3b92e74f9406e8c4eb34d354ab8791
SHA512

710677d3c6ebff9da638d22a3ae800eb12ba947aad9acb4e42f9e9268ade1b8dde680b4aa135121851285943aecc0fc9be85c5ca8a269d6857b35e905c7b7c12
SSDEEP

1536:VdX1kcRoMy1tkZBjxQVhfcmzedNTppNCSyh1FPmyGx8Nge8Fu/mGmDtcOd:VdFLoMk24ClwNge8FPGMf

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

rundll32.exe

description	pid	process	target process
PID 1152 wrote to memory of 700	1152	rundll32.exe	rundll32.exe
PID 1152 wrote to memory of 700	1152	rundll32.exe	rundll32.exe
PID 1152 wrote to memory of 700	1152	rundll32.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\SynapseCrack\bin\CefSharp.Wpf.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1152

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\SynapseCrack\bin\CefSharp.Wpf.dll,#1
2⤵
PID:700