749fdfa96253db72da0a092d220d4beca5f2dee02e34654bd05405876556591e

Analysis

max time kernel
31s
max time network
36s
platform
windows7_x64
resource
win7-20230220-es
resource tags

arch:x64arch:x86image:win7-20230220-eslocale:es-esos:windows7-x64systemwindows
submitted
09/05/2023, 19:31

Target

LunacyLauncher/x86/libgcc_s_dw2-1.dll
Size

42KB
MD5

c4b4409f186da70fcf2bcc60d5f05489
SHA1

056663c9fd2851cd64f39d882f6758e7a987bd42
SHA256

b35f2a8f4c8f1833f3cdec20739c58e295758ce22021d03d4335043148bd7610
SHA512

cdcb945a82a0304e4d7cfc9ae9d7e5a5e81d4e3025e982494c87c283f6fac542181e9e1e3028456b9b0b5b6279990cb3e1a50f9df0f6e707c70fa0e23c7a808c
SSDEEP

768:sZ1l+WCdhTcpKn+CwZoyf/dadEU9mRWtyTN:41l+WGhIKn+CQ7EyW0TN

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1248	1460	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 1296 wrote to memory of 1460	1296	rundll32.exe	28
PID 1296 wrote to memory of 1460	1296	rundll32.exe	28
PID 1296 wrote to memory of 1460	1296	rundll32.exe	28
PID 1296 wrote to memory of 1460	1296	rundll32.exe	28
PID 1296 wrote to memory of 1460	1296	rundll32.exe	28
PID 1296 wrote to memory of 1460	1296	rundll32.exe	28
PID 1296 wrote to memory of 1460	1296	rundll32.exe	28
PID 1460 wrote to memory of 1248	1460	rundll32.exe	29
PID 1460 wrote to memory of 1248	1460	rundll32.exe	29
PID 1460 wrote to memory of 1248	1460	rundll32.exe	29
PID 1460 wrote to memory of 1248	1460	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\LunacyLauncher\x86\libgcc_s_dw2-1.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1296
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\LunacyLauncher\x86\libgcc_s_dw2-1.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1460
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 1460 -s 228
    3⤵
    - Program crash
    PID:1248

memory/1460-54-0x000000006E940000-0x000000006E950000-memory.dmp

Filesize
64KB

Download