22e7a3d940bfbaa1f61b07047f9e64c9a8f45dc95b9681d5253f22f3ed59b766

Analysis

max time kernel
122s
max time network
142s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 17:06

Target

7efda0d6c070b15746b844eca3caeafa.dll
Size

77KB
MD5

7efda0d6c070b15746b844eca3caeafa
SHA1

350ef6e7b809b8628acf39d011fa6dfa3b33c2df
SHA256

22e7a3d940bfbaa1f61b07047f9e64c9a8f45dc95b9681d5253f22f3ed59b766
SHA512

dd9f1fb5fcbc8639cc8059a7c6c97ffed22ebf7517ba45cd18e52324e61f6817b355492dc834e2a0f56cc94625f9d9724198028da33293f73175c719cff6b586
SSDEEP

1536:uuH8v8Llbl6goZ7NOozqyI3/7zfOagqE3DC6QF46YyqLgy0JwrUSYZ+YjMdrULrk:ubv8BlgZBOWKvOagqE326QG6YyqLgy0c

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2304 wrote to memory of 2396	2304	rundll32.exe	15
PID 2304 wrote to memory of 2396	2304	rundll32.exe	15
PID 2304 wrote to memory of 2396	2304	rundll32.exe	15
PID 2304 wrote to memory of 2396	2304	rundll32.exe	15
PID 2304 wrote to memory of 2396	2304	rundll32.exe	15
PID 2304 wrote to memory of 2396	2304	rundll32.exe	15
PID 2304 wrote to memory of 2396	2304	rundll32.exe	15

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\7efda0d6c070b15746b844eca3caeafa.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2304
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\7efda0d6c070b15746b844eca3caeafa.dll,#1
  2⤵
  PID:2396