e6adf41f0d9c090fbc6e1bbf38d570d378337c6a30d0c17012277aaaac7a5dae

Analysis

max time kernel
148s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
26/12/2023, 09:19

Target

6333cdf2f09d73f5f782084faaf5178c.dll
Size

108KB
MD5

6333cdf2f09d73f5f782084faaf5178c
SHA1

fb117021265974eeeab2ecfe5c272599fb90db76
SHA256

e6adf41f0d9c090fbc6e1bbf38d570d378337c6a30d0c17012277aaaac7a5dae
SHA512

3846892a15b78b4fc718e40ae187e6e58d456b485e82ca681df816fc1c1a29b4f9cb2f84c88789b2808b7d6edb3545a4b0ffd86b39d206f3def52df0f33e0940
SSDEEP

1536:7wKq8q9fvGBgjwtjKmbWvi4uHLvbQSe4E7q5T5qbOqgPFvO:8KkvGB5t2mbQ+8e5FHvw

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4696 wrote to memory of 4076	4696	rundll32.exe	14
PID 4696 wrote to memory of 4076	4696	rundll32.exe	14
PID 4696 wrote to memory of 4076	4696	rundll32.exe	14

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6333cdf2f09d73f5f782084faaf5178c.dll,#1
1⤵
PID:4076

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6333cdf2f09d73f5f782084faaf5178c.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4696