bdc5768631d3bcb45f3559b1ce7309ebf62f2aa5abe5edd1067e4515ada4cc74

Analysis

max time kernel
118s
max time network
128s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 04:48

Target

558830b6e69920e784e7a8d34fd1d177.dll
Size

63KB
MD5

558830b6e69920e784e7a8d34fd1d177
SHA1

a9126c32513fa064ecc03307ced53d1d21258bad
SHA256

bdc5768631d3bcb45f3559b1ce7309ebf62f2aa5abe5edd1067e4515ada4cc74
SHA512

8fe3950a45e6df1031b1305f024af609b2ac875ba560942a905e8ee3e46fc643557f9abb4b4203362231697e28f77a1545b151a5c9f9f2b3d37048e866b065f3
SSDEEP

768:0uYCA7/STVltRwgx8FEaHVPTofOM1H836sEFw0tJZUeaU+CoFDhNb:0uYCMSTggmeCPToflT3mQoFDhNb

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2340 wrote to memory of 2916	2340	rundll32.exe	14
PID 2340 wrote to memory of 2916	2340	rundll32.exe	14
PID 2340 wrote to memory of 2916	2340	rundll32.exe	14
PID 2340 wrote to memory of 2916	2340	rundll32.exe	14
PID 2340 wrote to memory of 2916	2340	rundll32.exe	14
PID 2340 wrote to memory of 2916	2340	rundll32.exe	14
PID 2340 wrote to memory of 2916	2340	rundll32.exe	14

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\558830b6e69920e784e7a8d34fd1d177.dll,#1
1⤵
PID:2916

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\558830b6e69920e784e7a8d34fd1d177.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2340