7e2dc977fdd5e4692e0a20765b4981003bbc9e25124d37ce4a12d4d32e9cc13b

Analysis

max time kernel
140s
max time network
126s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
30/08/2023, 22:07

Target

7e2dc977fdd5e4692e0a20765b4981003bbc9e25124d37ce4a12d4d32e9cc13b.dll
Size

649KB
MD5

3e962ac21113e1730c453054118fe9e4
SHA1

ed25bb442b6424291b13c78d834402657e6c8f6f
SHA256

7e2dc977fdd5e4692e0a20765b4981003bbc9e25124d37ce4a12d4d32e9cc13b
SHA512

782bbccecc5a488a80bfa704b95e4636b11f5df730df3613cec1ddc18a06ac34534d998fdb9ffb86fbb25fa1ddfd076a62ec5c191b105bcf415cc2bb6fd669b3
SSDEEP

12288:gg+m4kyFolYT9ST8FKSDMQYirs1gBWCf0gR1nGtV0s:+7BalYT9e6K4MRiY1gkUutV3

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2516	rundll32.exe
2516	rundll32.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 844 wrote to memory of 2516	844	rundll32.exe	28
PID 844 wrote to memory of 2516	844	rundll32.exe	28
PID 844 wrote to memory of 2516	844	rundll32.exe	28
PID 844 wrote to memory of 2516	844	rundll32.exe	28
PID 844 wrote to memory of 2516	844	rundll32.exe	28
PID 844 wrote to memory of 2516	844	rundll32.exe	28
PID 844 wrote to memory of 2516	844	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\7e2dc977fdd5e4692e0a20765b4981003bbc9e25124d37ce4a12d4d32e9cc13b.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:844
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\7e2dc977fdd5e4692e0a20765b4981003bbc9e25124d37ce4a12d4d32e9cc13b.dll,#1
  2⤵
  - Suspicious use of SetWindowsHookEx
  PID:2516

memory/2516-0-0x0000000010000000-0x0000000010114000-memory.dmp

Filesize
1.1MB

Download
memory/2516-1-0x0000000010000000-0x0000000010114000-memory.dmp

Filesize
1.1MB

Download
memory/2516-3-0x0000000010000000-0x0000000010114000-memory.dmp

Filesize
1.1MB

Download
memory/2516-6-0x0000000010000000-0x0000000010114000-memory.dmp

Filesize
1.1MB

Download
memory/2516-5-0x0000000010000000-0x0000000010114000-memory.dmp

Filesize
1.1MB

Download
memory/2516-7-0x00000000022B0000-0x0000000002399000-memory.dmp

Filesize
932KB

Download
memory/2516-8-0x00000000022B0000-0x0000000002399000-memory.dmp

Filesize
932KB

Download
memory/2516-9-0x0000000010000000-0x0000000010114000-memory.dmp

Filesize
1.1MB

Download
memory/2516-11-0x00000000022B0000-0x0000000002399000-memory.dmp

Filesize
932KB

Download