7c39797c81c535dcfe537cbb360f548e520fc3af83210df0aae5ee5313852e65

Analysis

max time kernel
126s
max time network
118s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
26/12/2023, 00:20

Target

45f013b2cbfc37190561404dfffc7bc9.dll
Size

189KB
MD5

45f013b2cbfc37190561404dfffc7bc9
SHA1

9978f94662ffe92a7890eb0be9dda577e28f379c
SHA256

7c39797c81c535dcfe537cbb360f548e520fc3af83210df0aae5ee5313852e65
SHA512

2aef6ca9e7d4a544e3db7fa36b51fabb9a24e9878f2c7d13edba3078dc87a6afa9f059b932eb1fc41702303d667506fbf7158699d310afd3c1732d9eb3a6557b
SSDEEP

3072:o56dUKyZx7f+9fZGgqc4t/JvRJIqBRY0t+um6LjN/+tZho7C3wj:hdlGxa9RTqcQJJ3sb6LjN/+tPoL

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2180 wrote to memory of 1416	2180	rundll32.exe	14
PID 2180 wrote to memory of 1416	2180	rundll32.exe	14
PID 2180 wrote to memory of 1416	2180	rundll32.exe	14

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\45f013b2cbfc37190561404dfffc7bc9.dll,#1
1⤵
PID:1416

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\45f013b2cbfc37190561404dfffc7bc9.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2180