a5d7d858401beca4043e7c91ade997465919851101294a3ace551c9c2185eb66

Analysis

max time kernel
141s
max time network
127s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25-12-2023 06:11

Target

0aabb0a12e8b29f9f658633f685b6c51.dll
Size

855KB
MD5

0aabb0a12e8b29f9f658633f685b6c51
SHA1

a0246658608542654974176ddead0144cd79ccc5
SHA256

a5d7d858401beca4043e7c91ade997465919851101294a3ace551c9c2185eb66
SHA512

0dcd04ed8a5cea1e7302b8cb91d24e7f0e9ca62dd1314d3f86e2a9e28d0832e8f1d0297e44bae1b1dba231361ace0657c48362fab7aa36717ae2024d2ffabe22
SSDEEP

24576:GJcYyljzv92QqwQhN2K3yWds0JkKyVDnybHjZbmNrU0W0R0Sw7Q:GHylPojl2adsL9n6jZSguKT

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2720	rundll32.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2416 wrote to memory of 2720	2416	rundll32.exe	28
PID 2416 wrote to memory of 2720	2416	rundll32.exe	28
PID 2416 wrote to memory of 2720	2416	rundll32.exe	28
PID 2416 wrote to memory of 2720	2416	rundll32.exe	28
PID 2416 wrote to memory of 2720	2416	rundll32.exe	28
PID 2416 wrote to memory of 2720	2416	rundll32.exe	28
PID 2416 wrote to memory of 2720	2416	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0aabb0a12e8b29f9f658633f685b6c51.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2416
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0aabb0a12e8b29f9f658633f685b6c51.dll,#1
  2⤵
  - Suspicious use of SetWindowsHookEx
  PID:2720

memory/2720-0-0x0000000074700000-0x0000000074B19000-memory.dmp

Filesize
4.1MB

Download
memory/2720-1-0x00000000742E0000-0x00000000746F9000-memory.dmp

Filesize
4.1MB

Download
memory/2720-2-0x0000000074700000-0x0000000074B19000-memory.dmp

Filesize
4.1MB

Download
memory/2720-4-0x00000000001C0000-0x00000000001C1000-memory.dmp

Filesize
4KB

Download
memory/2720-5-0x00000000742E0000-0x00000000746F9000-memory.dmp

Filesize
4.1MB

Download
memory/2720-7-0x00000000001C0000-0x00000000001C1000-memory.dmp

Filesize
4KB

Download