75d28877562b13d989448e31bdef41a87a4c9390079dddc22ebf918db58c4dbc

Analysis

max time kernel
118s
max time network
124s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
15/10/2023, 14:46

Target

6784ec0dc5928b069428e2b26bc2ef50_dll32_JC.dll
Size

4KB
MD5

6784ec0dc5928b069428e2b26bc2ef50
SHA1

494379846e5a9d5876c954733aaf870113e6b43e
SHA256

75d28877562b13d989448e31bdef41a87a4c9390079dddc22ebf918db58c4dbc
SHA512

6637b74037579ba9297684ac0ae36b27433b2d5e0e8e4f67bf59829c8f3fef6802e203f8d1bf4cb0dd9805890a57645a74e25d54de7fa5e7df9667ba31eba7b5
SSDEEP

48:a5zdM1cSTBg0r27vTuAEKv/jBTTso7Emc8uV0P44bhZkWuaqEZw7OIzad:PT3r2vu9W72Mc74A0tywd

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2224 wrote to memory of 2116	2224	rundll32.exe	28
PID 2224 wrote to memory of 2116	2224	rundll32.exe	28
PID 2224 wrote to memory of 2116	2224	rundll32.exe	28
PID 2224 wrote to memory of 2116	2224	rundll32.exe	28
PID 2224 wrote to memory of 2116	2224	rundll32.exe	28
PID 2224 wrote to memory of 2116	2224	rundll32.exe	28
PID 2224 wrote to memory of 2116	2224	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6784ec0dc5928b069428e2b26bc2ef50_dll32_JC.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2224
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6784ec0dc5928b069428e2b26bc2ef50_dll32_JC.dll,#1
  2⤵
  PID:2116