c88cc7338f1415158b290e80b11c1ca2786494eb60390e61794ace374cc5b4ba

Analysis

max time kernel
118s
max time network
123s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
15/10/2023, 14:48

Target

6f40ca2359a4bb6ee26a149383eeca40_dll32_JC.dll
Size

5KB
MD5

6f40ca2359a4bb6ee26a149383eeca40
SHA1

cbcddf9a1e51443c0619222607cbfdbf2e6f40a2
SHA256

c88cc7338f1415158b290e80b11c1ca2786494eb60390e61794ace374cc5b4ba
SHA512

e412c137c000d23ed12c862eb815bfb1e040cb6dff9576823dc1817e6fe7258d0e32dd0b8e3c0ae568c2e7cd5b3030ce9d8c632c680003896295a3a2b903820e
SSDEEP

96:DixZjmjtjd8jPjcZGR5TIapfX9onVRODPpxI:unSR6bgYDfX9oVRODPpxI

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2732 wrote to memory of 2336	2732	rundll32.exe	28
PID 2732 wrote to memory of 2336	2732	rundll32.exe	28
PID 2732 wrote to memory of 2336	2732	rundll32.exe	28
PID 2732 wrote to memory of 2336	2732	rundll32.exe	28
PID 2732 wrote to memory of 2336	2732	rundll32.exe	28
PID 2732 wrote to memory of 2336	2732	rundll32.exe	28
PID 2732 wrote to memory of 2336	2732	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6f40ca2359a4bb6ee26a149383eeca40_dll32_JC.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2732
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6f40ca2359a4bb6ee26a149383eeca40_dll32_JC.dll,#1
  2⤵
  PID:2336