add2d2999ed2b5f9ba6bcf8f851b8df8c102161d8436b80bd8ce67794c67b79e

Analysis

max time kernel
139s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
10/10/2023, 20:19

Target

3D Analyzer 2.37/3D Analyze/dat3.dll
Size

1.0MB
MD5

fd42cbfc422655455e4d1968f88b4871
SHA1

03b98d3c6f8b5a8f6094955691eeaafa3b84a898
SHA256

91bf3fd810582d1d78fcac2d28867026ea3e09387e493a9a429f4b36f5a94e0c
SHA512

c6db80a42c87415a7653ee0245cec0c590b6475bf79ce305457139447ca7cb38419611fbc0340ff5bc39a2914df13075fe004e9374ddbe236c7ce21a47b2aad7
SSDEEP

24576:SP/zK7vTKLQTej6j2vUnD1p8IZX/6aJ+nC+kaKjteMjfaI3O3e2S6keMEvxBCAtg:D34F0R5C

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4960 wrote to memory of 3596	4960	rundll32.exe	82
PID 4960 wrote to memory of 3596	4960	rundll32.exe	82
PID 4960 wrote to memory of 3596	4960	rundll32.exe	82

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\3D Analyzer 2.37\3D Analyze\dat3.dll",#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4960
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe "C:\Users\Admin\AppData\Local\Temp\3D Analyzer 2.37\3D Analyze\dat3.dll",#1
  2⤵
  PID:3596

C:\Users\Admin\AppData\Local\Temp\3D Analyzer 2.37\3D Analyze\config_DX.ini

Filesize
453B

MD5
c8b345051d432c929564901c4d8af112

SHA1
33c0f152513fc48ab090599eeb9a2b979d6a1aae

SHA256
6c4894962957f7b2086b3b086ccead676b13edc4a997e5e621781374f2801a15

SHA512
3ae513af04f0e3a643aed3a95c4da7cdd5d8560ebaf9c8cb5c1bc38684198a9ced5faa8a069400b8c7bbb4fc4ba8f84046b2ad17297fa2b10921222ba4696e7c

Download Submit
C:\Users\Admin\AppData\Local\Temp\3D Analyzer 2.37\3D Analyze\config_DX.ini

Filesize
111B

MD5
91f0a932fc424b6975f71d4d0ddf6799

SHA1
18032acb3c96af280aca5ca941ebeef1fa56a54a

SHA256
dc3f1788fadb44775e530f63794fa114c67817752962e013e13c56524dfa2c36

SHA512
7e8900869dc1a9d229160ae2aae03268a21f3638c9019af8f18dc38aab0708e6abb77cf93ccc2421cf9826853f6eeb0d64c6abcd24f01f3abad0d059130def9d

Download Submit
C:\Users\Admin\AppData\Local\Temp\3D Analyzer 2.37\3D Analyze\config_DX.ini

Filesize
762B

MD5
7735beb14678b7216f999b691f246940

SHA1
9b8404b208cd8d0d4be939dfa94a0fc85f833724

SHA256
7ec21a85ac96a3a570bfc4993852cdc2fbf70e1e65800162786c90647a4edcab

SHA512
1eb1af873315ca218dbcbb32829485f232d4d7d7889b26999028da376072e62f63a2782965c6a5c4d6affc777c31879641c0006a9f3e897ff8fc32c6b02a6e2d

Download Submit