8ac04875976ff5f2b443dde670ba53f812e7ffff42e72336482081bacb337f38

Resubmissions

29/12/2023, 08:01

29/12/2023, 07:56

max time kernel
550s
max time network
715s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
29/12/2023, 08:01

Target

_94DF584B0D852F45ED59495B3083B186.dll
Size

260KB
MD5

af7d4c2ee2a19ba101875a1ef745b758
SHA1

1f4a386afb385e3ef263026619d65d879d280773
SHA256

e815832e0fe253f2a622ab0b7d2def8aa8a97671b723d3885c5baa7f00542937
SHA512

2fc849f79561135c58abe46e3dfecc0fc744b137fd060bc7411a8c60d2dde625d9325c75c9ad1557aee7b8fbdb765013549d3de9617d1535aca3c8cb72486294
SSDEEP

6144:eouw73Cj/FdgOR3DNyAskKRCBgsxdSajIhkFczY:eq7yj/fgi5yzj4Bg8dSacz

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 208 wrote to memory of 3184	208	rundll32.exe	83
PID 208 wrote to memory of 3184	208	rundll32.exe	83
PID 208 wrote to memory of 3184	208	rundll32.exe	83

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\_94DF584B0D852F45ED59495B3083B186.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:208
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\_94DF584B0D852F45ED59495B3083B186.dll,#1
  2⤵
  PID:3184