290538f26668edcb88c85e02ee5302f6cfc32ad808016d1a39b4775cab376a8b

Analysis

max time kernel
122s
max time network
128s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
16/08/2023, 07:31

Target

SecuriteInfo.com.Win32.PWSX-gen.20451.3420.dll
Size

11KB
MD5

2b78b8d4e6201e03a165a83aef558ed7
SHA1

fdfbe52987e59e49a3360fa84a22c67b63331676
SHA256

290538f26668edcb88c85e02ee5302f6cfc32ad808016d1a39b4775cab376a8b
SHA512

e32facd14d8c29ba22f28acda5799b168185b829d887e24eaceaffc70a1c10077a9d4607edac5eb480dad913f2815277dac8a466bc1db38288bc0a63a7b018ac
SSDEEP

192:lTdoFSrxLurGrTvMkrBFnowz+bq3/vXT+z:lTmFSfrbMkV5z+be3T+

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1048	2480	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2300 wrote to memory of 2480	2300	rundll32.exe	28
PID 2300 wrote to memory of 2480	2300	rundll32.exe	28
PID 2300 wrote to memory of 2480	2300	rundll32.exe	28
PID 2300 wrote to memory of 2480	2300	rundll32.exe	28
PID 2300 wrote to memory of 2480	2300	rundll32.exe	28
PID 2300 wrote to memory of 2480	2300	rundll32.exe	28
PID 2300 wrote to memory of 2480	2300	rundll32.exe	28
PID 2480 wrote to memory of 1048	2480	rundll32.exe	29
PID 2480 wrote to memory of 1048	2480	rundll32.exe	29
PID 2480 wrote to memory of 1048	2480	rundll32.exe	29
PID 2480 wrote to memory of 1048	2480	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.PWSX-gen.20451.3420.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2300
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.PWSX-gen.20451.3420.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2480
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2480 -s 268
    3⤵
    - Program crash
    PID:1048

memory/2480-54-0x0000000000190000-0x0000000000192000-memory.dmp

Filesize
8KB

Download