53552a570eed8d856d5cd2768eb4bc5e831c5fec835a911c7b89dd2f49a53e11

Analysis

max time kernel
120s
max time network
128s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
12/10/2023, 23:17

Target

53552a570eed8d856d5cd2768eb4bc5e831c5fec835a911c7b89dd2f49a53e11.dll
Size

51KB
MD5

4590a54e4f7bda5970133b624e860b38
SHA1

7633c4aa01972a7c83f878ee148aa254f44dbc51
SHA256

53552a570eed8d856d5cd2768eb4bc5e831c5fec835a911c7b89dd2f49a53e11
SHA512

9c88d63e63a28c595853a633af9e15fdac41183fdbb6277097b88bce2a58e9177b17ede6fd45ada6d0ca7c31a5ce4cdb750dea8fcea8dd6c84d9e0f2477ea1f3
SSDEEP

1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLQJYH5:1dWubF3n9S91BF3fboEJYH5

Score

1^/10

Suspicious behavior: RenamesItself 1 IoCs

pid	Process
2244	rundll32.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2352 wrote to memory of 2244	2352	rundll32.exe	28
PID 2352 wrote to memory of 2244	2352	rundll32.exe	28
PID 2352 wrote to memory of 2244	2352	rundll32.exe	28
PID 2352 wrote to memory of 2244	2352	rundll32.exe	28
PID 2352 wrote to memory of 2244	2352	rundll32.exe	28
PID 2352 wrote to memory of 2244	2352	rundll32.exe	28
PID 2352 wrote to memory of 2244	2352	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\53552a570eed8d856d5cd2768eb4bc5e831c5fec835a911c7b89dd2f49a53e11.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2352
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\53552a570eed8d856d5cd2768eb4bc5e831c5fec835a911c7b89dd2f49a53e11.dll,#1
  2⤵
  - Suspicious behavior: RenamesItself
  PID:2244