328759432b92b52461490728eaf0bb1f1bbf8818c7d9fe7f3616f66528c607d5

Resubmissions

25/03/2023, 22:57

25/03/2023, 22:49

max time kernel
92s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
25/03/2023, 22:49

Target

Mario Strikers Battle League Football Inst/Direct3D.dll
Size

86KB
MD5

2436d0e6b87f8a4f43352d10891bc7c8
SHA1

db100aa3eb42c423541f50fdd45737b7d7805f0c
SHA256

ce4523241c8e6404d56cdaad5cc8d85dc732c8874d20cbe7ed77c16ec18859bc
SHA512

cfc61c503b0ba2815c448e3d84021691516445086917bc3d65a248124339b6e1dad4aaee36a0bce93492fb71e03a7442b3d69847e3b8921f9d651179a94b2d04
SSDEEP

1536:UbZH3eyO6qe1VUROqK3CwenA45PI8JL9bkIeHCCBBpW+s8nBscP1u3YCCCR+CbyB:Krqe1aXK3ClI8zeHwcP1iP0Ci

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 880 wrote to memory of 1728	880	rundll32.exe	76
PID 880 wrote to memory of 1728	880	rundll32.exe	76
PID 880 wrote to memory of 1728	880	rundll32.exe	76

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Mario Strikers Battle League Football Inst\Direct3D.dll",#1
1⤵
- Suspicious use of WriteProcessMemory
PID:880
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Mario Strikers Battle League Football Inst\Direct3D.dll",#1
  2⤵
  PID:1728