c88cc7338f1415158b290e80b11c1ca2786494eb60390e61794ace374cc5b4ba

Analysis

max time kernel
140s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
15/10/2023, 14:48

Target

6f40ca2359a4bb6ee26a149383eeca40_dll32_JC.dll
Size

5KB
MD5

6f40ca2359a4bb6ee26a149383eeca40
SHA1

cbcddf9a1e51443c0619222607cbfdbf2e6f40a2
SHA256

c88cc7338f1415158b290e80b11c1ca2786494eb60390e61794ace374cc5b4ba
SHA512

e412c137c000d23ed12c862eb815bfb1e040cb6dff9576823dc1817e6fe7258d0e32dd0b8e3c0ae568c2e7cd5b3030ce9d8c632c680003896295a3a2b903820e
SSDEEP

96:DixZjmjtjd8jPjcZGR5TIapfX9onVRODPpxI:unSR6bgYDfX9oVRODPpxI

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 940 wrote to memory of 4448	940	rundll32.exe	81
PID 940 wrote to memory of 4448	940	rundll32.exe	81
PID 940 wrote to memory of 4448	940	rundll32.exe	81

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6f40ca2359a4bb6ee26a149383eeca40_dll32_JC.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:940
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6f40ca2359a4bb6ee26a149383eeca40_dll32_JC.dll,#1
  2⤵
  PID:4448