ae07d78eadbde7566c5355b80b1e70be2c6c962f403eda3a21ecd60a283e657a

Analysis

max time kernel
145s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
30/12/2023, 03:56

Target

0d9e90c3cfd0197f4758fa1553bf20c5.dll
Size

14KB
MD5

0d9e90c3cfd0197f4758fa1553bf20c5
SHA1

fd3fbca4a8061117e5da757240937349b8cf3bc4
SHA256

ae07d78eadbde7566c5355b80b1e70be2c6c962f403eda3a21ecd60a283e657a
SHA512

1d22d5b9033e5698b09e68a6df97e63dae9ca8ddfda6b584f100bc56f0597df8d4b71f8a6cb2fbf2dc94f1d89f21646dfb0e1eae96c6377367739a2feaa14580
SSDEEP

192:rDU56L/W9BilFsPCoIsZdaoNoUPbV00Lz6vGsd8pOdJTv9UUfNqpDDKGTRg70YOv:XUi8zP797pOdxqpNTeg1Liv2

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2732 wrote to memory of 936	2732	rundll32.exe	61
PID 2732 wrote to memory of 936	2732	rundll32.exe	61
PID 2732 wrote to memory of 936	2732	rundll32.exe	61

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0d9e90c3cfd0197f4758fa1553bf20c5.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2732
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0d9e90c3cfd0197f4758fa1553bf20c5.dll,#1
  2⤵
  PID:936