e8321b775e8a1d42cbda291ece00a871febb2077bc80a0e3af86980c45b585e9

Analysis

max time kernel
118s
max time network
137s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25-12-2023 11:20

Target

1a5ea90f87c59ec7dd9c14e8a43cbdbf.dll
Size

93KB
MD5

1a5ea90f87c59ec7dd9c14e8a43cbdbf
SHA1

4912e487c0f2f0c7e7dc9bb8afc78479ec9d1d1b
SHA256

e8321b775e8a1d42cbda291ece00a871febb2077bc80a0e3af86980c45b585e9
SHA512

65d1f647eeaf14dd67d00fca7d4b2ea7d98af9f5553fe34c693e37e11b3b09bf90fbaead2324c17203067aea5ef45f7d2630d8df3b0bdfba39fca445daf2b60a
SSDEEP

1536:S4wxnaMqdVNxIiIjvMhr0blN2BOkA8ziCU21yzwN/83:S48nMdPxdIQhro25Aq9U/z48

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3000	2988	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2976 wrote to memory of 2988	2976	rundll32.exe	28
PID 2976 wrote to memory of 2988	2976	rundll32.exe	28
PID 2976 wrote to memory of 2988	2976	rundll32.exe	28
PID 2976 wrote to memory of 2988	2976	rundll32.exe	28
PID 2976 wrote to memory of 2988	2976	rundll32.exe	28
PID 2976 wrote to memory of 2988	2976	rundll32.exe	28
PID 2976 wrote to memory of 2988	2976	rundll32.exe	28
PID 2988 wrote to memory of 3000	2988	rundll32.exe	29
PID 2988 wrote to memory of 3000	2988	rundll32.exe	29
PID 2988 wrote to memory of 3000	2988	rundll32.exe	29
PID 2988 wrote to memory of 3000	2988	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1a5ea90f87c59ec7dd9c14e8a43cbdbf.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2976
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1a5ea90f87c59ec7dd9c14e8a43cbdbf.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2988
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2988 -s 196
    3⤵
    - Program crash
    PID:3000

memory/2988-0-0x0000000010000000-0x0000000010031000-memory.dmp

Filesize
196KB

Download