769e21376ee8909e400f5645ca5a09bf26c03bd2a4028b08e4f589779924c161

Analysis

max time kernel
89s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
26/12/2023, 00:29

Target

4678969692d4ad1d5572045065c6e76b.dll
Size

4KB
MD5

4678969692d4ad1d5572045065c6e76b
SHA1

50d73c52c492a6a1bfc76105ff2acc0d3a594511
SHA256

769e21376ee8909e400f5645ca5a09bf26c03bd2a4028b08e4f589779924c161
SHA512

86c7c5af3432ff5db08e5e66b0a9a3d69dd063918d94fe0c4b7b3bc76b06de2b8ad12fdd542680532d7817c388af7c38d8949ddf3c78d80fe698e82ed7a92f5b
SSDEEP

48:a5z4K+cmATmRYoRZCTJzJlvT5K0DP8Lv23Lk7v79sJvvtc+5HV:MTWnRZ0lJJT5lzuE2T9sJva+51

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2964 wrote to memory of 4156	2964	rundll32.exe	14
PID 2964 wrote to memory of 4156	2964	rundll32.exe	14
PID 2964 wrote to memory of 4156	2964	rundll32.exe	14

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4678969692d4ad1d5572045065c6e76b.dll,#1
1⤵
PID:4156

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4678969692d4ad1d5572045065c6e76b.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2964