59d6518ef6f246d2f8b7a8a52d902eff4c51af037a520992e959e99abb650e60

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
29-12-2023 23:13

Target

069d5aed242189daf755bdc40adcd1bb.dll
Size

19KB
MD5

069d5aed242189daf755bdc40adcd1bb
SHA1

217ff9d61e8d67c985c6eb89ae1a897e6577fc0c
SHA256

59d6518ef6f246d2f8b7a8a52d902eff4c51af037a520992e959e99abb650e60
SHA512

9ba776205baff5a238100034fedc57988f682d926563aa1b8ad397bc2dcefac651b30ec4828c000284bcf5636a10f08c89d3ca4b0f9c4c68e67fbe05d2f1e3f4
SSDEEP

384:V8RdCyfMqlW2mQmjNyTo63Eo7MLoeH9CP41z5Azxo/:VACyUqlvmQAIb37ML7HTdm

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 780 wrote to memory of 1752	780	rundll32.exe	16
PID 780 wrote to memory of 1752	780	rundll32.exe	16
PID 780 wrote to memory of 1752	780	rundll32.exe	16
PID 780 wrote to memory of 1752	780	rundll32.exe	16
PID 780 wrote to memory of 1752	780	rundll32.exe	16
PID 780 wrote to memory of 1752	780	rundll32.exe	16
PID 780 wrote to memory of 1752	780	rundll32.exe	16

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\069d5aed242189daf755bdc40adcd1bb.dll,#1
1⤵
PID:1752

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\069d5aed242189daf755bdc40adcd1bb.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:780