58e264f606efa1cd94ce766b3e2cb813440a65b47822f4ea2d508eb54d714160

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
28/12/2023, 23:02

Target

226bf7f08d3fae41526267f1bf4ae1839a4f880a844a6fbb556a0a5699c27a41.dll
Size

100KB
MD5

03f832a198e47982d84ee84562013c2f
SHA1

738404bef435ecd72ae3f5b2ffb554fcd76eefe0
SHA256

226bf7f08d3fae41526267f1bf4ae1839a4f880a844a6fbb556a0a5699c27a41
SHA512

e0eff9a36f8ba3ee712e23ccf011da64c88584480fc2fcd05c40bcd11df27fe110f50f0d14371568df3e2acccbbb6c0922a2d22cf34efc7556ce846b1d9f1719
SSDEEP

1536:Ar6cqi2k7Q13OdRutRNGloy2735KAB3DeHOpBl820z62ZrDcUJnNL3i:AGg7MgYtsoyk35KA3aD212Z3nXL

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2512 wrote to memory of 3796	2512	rundll32.exe	89
PID 2512 wrote to memory of 3796	2512	rundll32.exe	89
PID 2512 wrote to memory of 3796	2512	rundll32.exe	89

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\226bf7f08d3fae41526267f1bf4ae1839a4f880a844a6fbb556a0a5699c27a41.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2512
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\226bf7f08d3fae41526267f1bf4ae1839a4f880a844a6fbb556a0a5699c27a41.dll,#1
  2⤵
  PID:3796

memory/3796-0-0x0000000000400000-0x000000000041F000-memory.dmp

Filesize
124KB

Download
memory/3796-1-0x0000000000400000-0x000000000041F000-memory.dmp

Filesize
124KB

Download
memory/3796-2-0x0000000000400000-0x000000000041F000-memory.dmp

Filesize
124KB

Download
memory/3796-3-0x0000000000400000-0x000000000041F000-memory.dmp

Filesize
124KB

Download
memory/3796-4-0x0000000000400000-0x000000000041F000-memory.dmp

Filesize
124KB

Download
memory/3796-5-0x0000000000400000-0x000000000041F000-memory.dmp

Filesize
124KB

Download
memory/3796-6-0x0000000000400000-0x000000000041F000-memory.dmp

Filesize
124KB

Download
memory/3796-7-0x0000000000400000-0x000000000041F000-memory.dmp

Filesize
124KB

Download
memory/3796-8-0x0000000000400000-0x000000000041F000-memory.dmp

Filesize
124KB

Download
memory/3796-9-0x0000000000400000-0x000000000041F000-memory.dmp

Filesize
124KB

Download
memory/3796-10-0x0000000000400000-0x000000000041F000-memory.dmp

Filesize
124KB

Download
memory/3796-11-0x0000000000400000-0x000000000041F000-memory.dmp

Filesize
124KB

Download
memory/3796-12-0x0000000000400000-0x000000000041F000-memory.dmp

Filesize
124KB

Download
memory/3796-13-0x0000000000400000-0x000000000041F000-memory.dmp

Filesize
124KB

Download