87b3312dd7f993ed7d0bd00217a0adad40bea1c9ee7bef46a6a920f7584c7e1e

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231023-en
resource tags

arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
submitted
25/11/2023, 12:04

Target

87b3312dd7f993ed7d0bd00217a0adad40bea1c9ee7bef46a6a920f7584c7e1e.dll
Size

72KB
MD5

1e41b4c76c1ace1fa4324886716b7872
SHA1

92903f0174631f6ef11b3539e5c7334a07cd079d
SHA256

87b3312dd7f993ed7d0bd00217a0adad40bea1c9ee7bef46a6a920f7584c7e1e
SHA512

9345ddd04d1b6cd6aff8a49cdd44f293439ec1fcb833d5608124e03bbc4b02d0808723e6b28562e8be61381c12daf9dd1fb16be95e5290327a3904ffa0699492
SSDEEP

1536:0Frj0tpOjsgx8No1LMuwSSYmwsWkpcdlIHwUMHVpWA3DE:QQVNo1wuwS84lcwUMHrTE

Score

1^/10

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
2132	rundll32.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 1232 wrote to memory of 2132	1232	rundll32.exe	28
PID 1232 wrote to memory of 2132	1232	rundll32.exe	28
PID 1232 wrote to memory of 2132	1232	rundll32.exe	28
PID 1232 wrote to memory of 2132	1232	rundll32.exe	28
PID 1232 wrote to memory of 2132	1232	rundll32.exe	28
PID 1232 wrote to memory of 2132	1232	rundll32.exe	28
PID 1232 wrote to memory of 2132	1232	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\87b3312dd7f993ed7d0bd00217a0adad40bea1c9ee7bef46a6a920f7584c7e1e.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1232
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\87b3312dd7f993ed7d0bd00217a0adad40bea1c9ee7bef46a6a920f7584c7e1e.dll,#1
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2132

memory/2132-1-0x0000000074620000-0x0000000074640000-memory.dmp

Filesize
128KB

Download
memory/2132-0-0x0000000074600000-0x0000000074620000-memory.dmp

Filesize
128KB

Download
memory/2132-3-0x0000000074600000-0x0000000074620000-memory.dmp

Filesize
128KB

Download
memory/2132-4-0x0000000074600000-0x0000000074620000-memory.dmp

Filesize
128KB

Download