26c01d7712e991c68ee481cc66ad861fa11cd0bf1ff0a9be7ef8b4f3587b2629

Analysis

max time kernel
137s
max time network
60s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
24/12/2023, 18:44

Target

0ccf131345ba4ec2dcd10ecc7dceda3b.dll
Size

24KB
MD5

0ccf131345ba4ec2dcd10ecc7dceda3b
SHA1

d227ee569f322ccfa5c1e812c8bb299ae823a367
SHA256

26c01d7712e991c68ee481cc66ad861fa11cd0bf1ff0a9be7ef8b4f3587b2629
SHA512

ab23b19ece9fc096d0c0a2026fb72d935fedea1a8195d03ca291a5515417059c2267ddaf9ccc9c6eb745d8eeed1490b133f6062aafe343a4ad869062f1855712
SSDEEP

384:6KID2zuPI6evY9AYcr4x1+qXbOwc0HhI2kaS4R3Vxh25pZ89Iud3Imm:6KmzI6egSIQ5mH51RlxY7ZELW

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 456 wrote to memory of 5052	456	rundll32.exe	16
PID 456 wrote to memory of 5052	456	rundll32.exe	16
PID 456 wrote to memory of 5052	456	rundll32.exe	16

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0ccf131345ba4ec2dcd10ecc7dceda3b.dll,#1
1⤵
PID:5052

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0ccf131345ba4ec2dcd10ecc7dceda3b.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:456