aeddc5a200124855a11a8ba26c553f118c3de38b7c3328d6b6e8b25787ace1f3

Analysis

max time kernel
119s
max time network
122s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
13/11/2023, 07:51

Target

aeddc5a200124855a11a8ba26c553f118c3de38b7c3328d6b6e8b25787ace1f3.dll
Size

89KB
MD5

a0957c824c4f2686cdff5252dae8a30b
SHA1

8e5968f02852cb4ae9ec7a1dff6148aecc1d219a
SHA256

aeddc5a200124855a11a8ba26c553f118c3de38b7c3328d6b6e8b25787ace1f3
SHA512

daf222ea00e2d76d2bd1ed3666ffb733e973b72053813a9c797cbb71cb6788244d96078a677f593af6c6d42b54880310eeed7bcb0be54490135226d3e4a89fa0
SSDEEP

1536:+WJE9pCO3sUgWRpefdlC9UfIN8jfQxtOz3n0j7Ko6Q:+kwSjClN8zjno6

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2104 wrote to memory of 3056	2104	rundll32.exe	28
PID 2104 wrote to memory of 3056	2104	rundll32.exe	28
PID 2104 wrote to memory of 3056	2104	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\aeddc5a200124855a11a8ba26c553f118c3de38b7c3328d6b6e8b25787ace1f3.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2104
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2104 -s 108
  2⤵
  PID:3056