7e2dc977fdd5e4692e0a20765b4981003bbc9e25124d37ce4a12d4d32e9cc13b

Analysis

max time kernel
140s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
30/08/2023, 22:07

Target

7e2dc977fdd5e4692e0a20765b4981003bbc9e25124d37ce4a12d4d32e9cc13b.dll
Size

649KB
MD5

3e962ac21113e1730c453054118fe9e4
SHA1

ed25bb442b6424291b13c78d834402657e6c8f6f
SHA256

7e2dc977fdd5e4692e0a20765b4981003bbc9e25124d37ce4a12d4d32e9cc13b
SHA512

782bbccecc5a488a80bfa704b95e4636b11f5df730df3613cec1ddc18a06ac34534d998fdb9ffb86fbb25fa1ddfd076a62ec5c191b105bcf415cc2bb6fd669b3
SSDEEP

12288:gg+m4kyFolYT9ST8FKSDMQYirs1gBWCf0gR1nGtV0s:+7BalYT9e6K4MRiY1gkUutV3

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2784	rundll32.exe
2784	rundll32.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1472 wrote to memory of 2784	1472	rundll32.exe	80
PID 1472 wrote to memory of 2784	1472	rundll32.exe	80
PID 1472 wrote to memory of 2784	1472	rundll32.exe	80

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\7e2dc977fdd5e4692e0a20765b4981003bbc9e25124d37ce4a12d4d32e9cc13b.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1472
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\7e2dc977fdd5e4692e0a20765b4981003bbc9e25124d37ce4a12d4d32e9cc13b.dll,#1
  2⤵
  - Suspicious use of SetWindowsHookEx
  PID:2784

memory/2784-0-0x0000000010000000-0x0000000010114000-memory.dmp

Filesize
1.1MB

Download
memory/2784-1-0x0000000010000000-0x0000000010114000-memory.dmp

Filesize
1.1MB

Download
memory/2784-2-0x0000000010000000-0x0000000010114000-memory.dmp

Filesize
1.1MB

Download
memory/2784-3-0x0000000010000000-0x0000000010114000-memory.dmp

Filesize
1.1MB

Download
memory/2784-5-0x0000000002880000-0x0000000002969000-memory.dmp

Filesize
932KB

Download
memory/2784-4-0x0000000002880000-0x0000000002969000-memory.dmp

Filesize
932KB

Download
memory/2784-6-0x0000000010000000-0x0000000010114000-memory.dmp

Filesize
1.1MB

Download
memory/2784-7-0x0000000002880000-0x0000000002969000-memory.dmp

Filesize
932KB

Download