53b4919ef84e29f8f5fb78044b0d77eb722c10eac708a286cb11c1e1ea17762c

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
28-12-2023 20:43

Target

f6da0c9ac1fe406539b30dfd0b4844db.dll
Size

99KB
MD5

f6da0c9ac1fe406539b30dfd0b4844db
SHA1

4fb689ef3eacc938b5f22e7081ef0096bb0fbe8f
SHA256

53b4919ef84e29f8f5fb78044b0d77eb722c10eac708a286cb11c1e1ea17762c
SHA512

cdce9d235619eddb8a32422d05e7868337d48a62c98af047d39ed13fb2c523849189d9274acb6d72d05cb9c14aaf06313b0d4b9238f36fc1437f896e206ac302
SSDEEP

1536:uX7ymBrFzlYboUV6ljwkpsIY1IUryK9vprkXK+IhR7vw5m2a3:uumBRzSkUQJiI2IUx9vuQRzw5da

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2296 wrote to memory of 2376	2296	rundll32.exe	16
PID 2296 wrote to memory of 2376	2296	rundll32.exe	16
PID 2296 wrote to memory of 2376	2296	rundll32.exe	16
PID 2296 wrote to memory of 2376	2296	rundll32.exe	16
PID 2296 wrote to memory of 2376	2296	rundll32.exe	16
PID 2296 wrote to memory of 2376	2296	rundll32.exe	16
PID 2296 wrote to memory of 2376	2296	rundll32.exe	16

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\f6da0c9ac1fe406539b30dfd0b4844db.dll,#1
1⤵
PID:2376

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\f6da0c9ac1fe406539b30dfd0b4844db.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2296