e90eb12893adf5f7151d65bd7154b6f3632b2db371181b2c872b5f682e970ed7

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
29/12/2023, 20:25

Target

030cd89d8e603d49cffbf2b24ffc71b8.dll
Size

344KB
MD5

030cd89d8e603d49cffbf2b24ffc71b8
SHA1

8de8e530424d8daebb93d283343a6080fef5134f
SHA256

e90eb12893adf5f7151d65bd7154b6f3632b2db371181b2c872b5f682e970ed7
SHA512

325ea2f035e1adbc1a50da4acdce2eea7c9a497982218d951d43006be3e3717e5c92c53f6b4478b25d8587dbb67ac9efb587ca7ac76ea8c6c81f229179cb0e1f
SSDEEP

6144:UDHOez89k9wJX2o90K/qKVTkcA8uPyJdTBo1mTKI46:UTOvCs0KVkcJJdT44KI46

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1676	2268	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2244 wrote to memory of 2268	2244	rundll32.exe	28
PID 2244 wrote to memory of 2268	2244	rundll32.exe	28
PID 2244 wrote to memory of 2268	2244	rundll32.exe	28
PID 2244 wrote to memory of 2268	2244	rundll32.exe	28
PID 2244 wrote to memory of 2268	2244	rundll32.exe	28
PID 2244 wrote to memory of 2268	2244	rundll32.exe	28
PID 2244 wrote to memory of 2268	2244	rundll32.exe	28
PID 2268 wrote to memory of 1676	2268	rundll32.exe	29
PID 2268 wrote to memory of 1676	2268	rundll32.exe	29
PID 2268 wrote to memory of 1676	2268	rundll32.exe	29
PID 2268 wrote to memory of 1676	2268	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\030cd89d8e603d49cffbf2b24ffc71b8.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2244
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\030cd89d8e603d49cffbf2b24ffc71b8.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2268
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2268 -s 296
    3⤵
    - Program crash
    PID:1676