696840e97a15e6ea9920b4256f16504a8b6c7512b3507510d3c79630d484ea18

Analysis

max time kernel
125s
max time network
128s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
16/08/2023, 02:55

Target

696840e97a15e6ea9920b4256f16504a8b6c7512b3507510d3c79630d484ea18.dll
Size

60KB
MD5

578f673f4004ba531cb1a81736a90cac
SHA1

124303cb76fb28173bd70458ae208f7302359c2e
SHA256

696840e97a15e6ea9920b4256f16504a8b6c7512b3507510d3c79630d484ea18
SHA512

8ff4575300087c91c1d1b886b2b26351238cc710f2094791301486b070a0122c551cd1a1f495e40b00dacb177ec082b33413f3fbf6500fb72e1c6c6e7565bf03
SSDEEP

768:IM3wErkXbh0evqZGJCkg4h+J7j6lfo3xqXBv:090evqZGJo4hUXc

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2456 wrote to memory of 3304	2456	regsvr32.exe	82
PID 2456 wrote to memory of 3304	2456	regsvr32.exe	82
PID 2456 wrote to memory of 3304	2456	regsvr32.exe	82

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\696840e97a15e6ea9920b4256f16504a8b6c7512b3507510d3c79630d484ea18.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:2456
- C:\Windows\SysWOW64\regsvr32.exe
  /s C:\Users\Admin\AppData\Local\Temp\696840e97a15e6ea9920b4256f16504a8b6c7512b3507510d3c79630d484ea18.dll
  2⤵
  PID:3304