add2d2999ed2b5f9ba6bcf8f851b8df8c102161d8436b80bd8ce67794c67b79e

Analysis

max time kernel
117s
max time network
139s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
10/10/2023, 20:19

Target

3D Analyzer 2.37/3D Analyze/dat3.dll
Size

1.0MB
MD5

fd42cbfc422655455e4d1968f88b4871
SHA1

03b98d3c6f8b5a8f6094955691eeaafa3b84a898
SHA256

91bf3fd810582d1d78fcac2d28867026ea3e09387e493a9a429f4b36f5a94e0c
SHA512

c6db80a42c87415a7653ee0245cec0c590b6475bf79ce305457139447ca7cb38419611fbc0340ff5bc39a2914df13075fe004e9374ddbe236c7ce21a47b2aad7
SSDEEP

24576:SP/zK7vTKLQTej6j2vUnD1p8IZX/6aJ+nC+kaKjteMjfaI3O3e2S6keMEvxBCAtg:D34F0R5C

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2992 wrote to memory of 2096	2992	rundll32.exe	28
PID 2992 wrote to memory of 2096	2992	rundll32.exe	28
PID 2992 wrote to memory of 2096	2992	rundll32.exe	28
PID 2992 wrote to memory of 2096	2992	rundll32.exe	28
PID 2992 wrote to memory of 2096	2992	rundll32.exe	28
PID 2992 wrote to memory of 2096	2992	rundll32.exe	28
PID 2992 wrote to memory of 2096	2992	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\3D Analyzer 2.37\3D Analyze\dat3.dll",#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2992
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe "C:\Users\Admin\AppData\Local\Temp\3D Analyzer 2.37\3D Analyze\dat3.dll",#1
  2⤵
  PID:2096

C:\Users\Admin\AppData\Local\Temp\3D Analyzer 2.37\3D Analyze\config_DX.ini

Filesize
231B

MD5
a89f06e1648fd593aac1241b72d735f4

SHA1
5f34e42f985b6173c5ba967973b7c623931dcd7b

SHA256
b93a08605efe220056e6175573a9062cd5b4535397ca957ddf94126f224fedfc

SHA512
26bac0d5e79030e9d2da622e6124c7b173043c3d058c61e6ebb5c13745a0b6491e8bbf1b472b4ac1ecfe492190580f5edd139c7aa328b30fe8be8bfd9e4e6859

Download Submit
C:\Users\Admin\AppData\Local\Temp\3D Analyzer 2.37\3D Analyze\config_DX.ini

Filesize
428B

MD5
d3e1f30ca8e80e8dc58569804086dc07

SHA1
7b90d9c4b9c2527c8d92976826841f6cfe2f1788

SHA256
04e94cbc007a1423e7b23d724aeba5435f11eab12018d6c65436251744e27ac3

SHA512
2bc793b66658bb49f82bb3386330b79d22eac91dbb6790cfdefd73a13629533adedfe9edf2733b023d086719ccb126fec8bdfa0fc10ea3385f29c2d83f518f41

Download Submit
C:\Users\Admin\AppData\Local\Temp\3D Analyzer 2.37\3D Analyze\config_DX.ini

Filesize
762B

MD5
7735beb14678b7216f999b691f246940

SHA1
9b8404b208cd8d0d4be939dfa94a0fc85f833724

SHA256
7ec21a85ac96a3a570bfc4993852cdc2fbf70e1e65800162786c90647a4edcab

SHA512
1eb1af873315ca218dbcbb32829485f232d4d7d7889b26999028da376072e62f63a2782965c6a5c4d6affc777c31879641c0006a9f3e897ff8fc32c6b02a6e2d

Download Submit