75f3314ce19262f1846345189b196e1440cfcafd6a0505b608cbeeb2cd4198ae

Analysis

max time kernel
118s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
24/12/2023, 17:28

Target

0889392a5b295bf8f071a843a34f439e.dll
Size

32KB
MD5

0889392a5b295bf8f071a843a34f439e
SHA1

cf914557e289a8bd82672df67c7598ff3a575d4b
SHA256

75f3314ce19262f1846345189b196e1440cfcafd6a0505b608cbeeb2cd4198ae
SHA512

9bc68aab316b0cf2f5c759d99cd9499e611753a1a560d47525eca53e989f69e0fb0801071856b96d7d9aac8b9c02d3d36da5243f1699dc080ef5521060babd68
SSDEEP

384:K63mPFLEf1szTYe+jOWJmlaOvDUXXYtyzx4W+LQgNoUofnv:z8Fk1uTYxwUX+44tLjiUof

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2168	1760	WerFault.exe	14

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 1736 wrote to memory of 1760	1736	rundll32.exe	14
PID 1736 wrote to memory of 1760	1736	rundll32.exe	14
PID 1736 wrote to memory of 1760	1736	rundll32.exe	14
PID 1736 wrote to memory of 1760	1736	rundll32.exe	14
PID 1736 wrote to memory of 1760	1736	rundll32.exe	14
PID 1736 wrote to memory of 1760	1736	rundll32.exe	14
PID 1736 wrote to memory of 1760	1736	rundll32.exe	14
PID 1760 wrote to memory of 2168	1760	rundll32.exe	18
PID 1760 wrote to memory of 2168	1760	rundll32.exe	18
PID 1760 wrote to memory of 2168	1760	rundll32.exe	18
PID 1760 wrote to memory of 2168	1760	rundll32.exe	18

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0889392a5b295bf8f071a843a34f439e.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1736
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0889392a5b295bf8f071a843a34f439e.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1760
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 1760 -s 196
    3⤵
    - Program crash
    PID:2168

memory/1760-0-0x0000000010000000-0x0000000010008000-memory.dmp

Filesize
32KB

Download