678565121ed8ea8f106d675442bff8a84707b827d06433498da5ae402f251bae

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 15:06

Target

77d327f4458ae3d233b6347a46d599c9.dll
Size

7KB
MD5

77d327f4458ae3d233b6347a46d599c9
SHA1

c0c15cba61889524dd659473d4650ac9b25392b3
SHA256

678565121ed8ea8f106d675442bff8a84707b827d06433498da5ae402f251bae
SHA512

4cbd32920a232627dce3c5191dbba8f8e0a8c9fcf77d30412aba5ecf7de04021b02ad04c3acf1455fa29aa6f7b7799b8354dc89c239d6fb7626f32228d53fe5c
SSDEEP

48:66ay5YVO3EVkApc2wp8hH1NZn5EquglQ067YbPWhbABbgL3q9J5S2hmc:b3EVkApcX4Hiv0hbPDq3qX5S2hV

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2928 wrote to memory of 2436	2928	rundll32.exe	28
PID 2928 wrote to memory of 2436	2928	rundll32.exe	28
PID 2928 wrote to memory of 2436	2928	rundll32.exe	28
PID 2928 wrote to memory of 2436	2928	rundll32.exe	28
PID 2928 wrote to memory of 2436	2928	rundll32.exe	28
PID 2928 wrote to memory of 2436	2928	rundll32.exe	28
PID 2928 wrote to memory of 2436	2928	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\77d327f4458ae3d233b6347a46d599c9.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2928
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\77d327f4458ae3d233b6347a46d599c9.dll,#1
  2⤵
  PID:2436