8ac04875976ff5f2b443dde670ba53f812e7ffff42e72336482081bacb337f38

Resubmissions

29/12/2023, 08:01

29/12/2023, 07:56

max time kernel
224s
max time network
449s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
29/12/2023, 08:01

Target

_96AA03667D6CB6E55CBC8FBA4385D622.dll
Size

244KB
MD5

55e4386403442f4530a32d41458c9ccd
SHA1

a561db6725302a1c2d278d47f7dc55dae488f1ec
SHA256

833f49b5c5eec47038fe9d0d10edb2078bddf3119911e49ba59fda2171889fb6
SHA512

c5a16b34f991be791de5749861654cd8b96371c461e1225cf7a33dcc0b619f8230309915134a6d4eb7c9a25fdd1d83ef15a80a68599bdfe23f22b4c2a8890d46
SSDEEP

3072:p3uxTGu3ao4EIRZf1HOaKQdJKLwK2/zCKVs7CntuLEYjL0/Wh2VyAQ7jI4Caftj:ho4VZZKLF2/dVs7CA8WZ7j3C

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2432 wrote to memory of 3016	2432	rundll32.exe	73
PID 2432 wrote to memory of 3016	2432	rundll32.exe	73
PID 2432 wrote to memory of 3016	2432	rundll32.exe	73

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\_96AA03667D6CB6E55CBC8FBA4385D622.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2432
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\_96AA03667D6CB6E55CBC8FBA4385D622.dll,#1
  2⤵
  PID:3016