157499786ee705c7cdf59249f8bd9ab5b4a73ba6020c7b04480bc8a03a14c22c

Analysis

max time kernel
119s
max time network
122s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
24-08-2023 09:28

Target

157499786ee705c7cdf59249f8bd9ab5b4a73ba6020c7b04480bc8a03a14c22c.dll
Size

12KB
MD5

ac81da346facc29fdc711e4db404ea19
SHA1

4776e720e25c54919d9490ac74cd119b172bbd88
SHA256

157499786ee705c7cdf59249f8bd9ab5b4a73ba6020c7b04480bc8a03a14c22c
SHA512

2e0379ccd261edc297c1de12634abbb6616852854f13d65b529f2397822b18ace3d669161ef30f66609328d2d70e0d660cd0dfedc09aa495aa95b04790730154
SSDEEP

192:jVgD4lPEGtJu+qWcjWJ96QjO44aMNvyk6l40fByk+z54GoemiMVn41vINy:jWqcrKJfjVLc6O05PI54lemdnIvS

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1308	2176	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2604 wrote to memory of 2176	2604	rundll32.exe	28
PID 2604 wrote to memory of 2176	2604	rundll32.exe	28
PID 2604 wrote to memory of 2176	2604	rundll32.exe	28
PID 2604 wrote to memory of 2176	2604	rundll32.exe	28
PID 2604 wrote to memory of 2176	2604	rundll32.exe	28
PID 2604 wrote to memory of 2176	2604	rundll32.exe	28
PID 2604 wrote to memory of 2176	2604	rundll32.exe	28
PID 2176 wrote to memory of 1308	2176	rundll32.exe	29
PID 2176 wrote to memory of 1308	2176	rundll32.exe	29
PID 2176 wrote to memory of 1308	2176	rundll32.exe	29
PID 2176 wrote to memory of 1308	2176	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\157499786ee705c7cdf59249f8bd9ab5b4a73ba6020c7b04480bc8a03a14c22c.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2604
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\157499786ee705c7cdf59249f8bd9ab5b4a73ba6020c7b04480bc8a03a14c22c.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2176
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2176 -s 224
    3⤵
    - Program crash
    PID:1308