dbdcb858b258e256ed0bebd93ff148a6fc02ccfe090d7b84724437bc8af3b6aa

Analysis

max time kernel
149s
max time network
101s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
24/12/2023, 16:28

Target

05bd09f718a69696e55e3d4eb9fa8bb1.dll
Size

100KB
MD5

05bd09f718a69696e55e3d4eb9fa8bb1
SHA1

5e6d535e46cdafd0d449dc1559dbca9f17e40b52
SHA256

dbdcb858b258e256ed0bebd93ff148a6fc02ccfe090d7b84724437bc8af3b6aa
SHA512

52e47a5e479435795ad1c15526aa3db0a370ea68f4347186022fd7ce0b4d3e99f0ab4b834864949dfb88a6a8dacc858ba41ecde22f5483c2d196a77d4934f07f
SSDEEP

1536:Dnys5590LogsjTKSH7E+tDSpx9hqBqF3KlBniV14ba:Dnym59Qogsa+tDSpfh1F3KlBni6a

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1352	rundll32.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1736 wrote to memory of 1352	1736	rundll32.exe	12
PID 1736 wrote to memory of 1352	1736	rundll32.exe	12
PID 1736 wrote to memory of 1352	1736	rundll32.exe	12

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\05bd09f718a69696e55e3d4eb9fa8bb1.dll,#1
1⤵
- Suspicious use of SetWindowsHookEx
PID:1352

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\05bd09f718a69696e55e3d4eb9fa8bb1.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1736