323491ec3f998e2beb73e4e600d7fd4f728fc849e244dc06ff4c6f81e6ba47f6

Analysis

max time kernel
161s
max time network
31s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 04:09

Target

0df5d813039330c7467303f8d8dce955.dll
Size

27KB
MD5

0df5d813039330c7467303f8d8dce955
SHA1

bbb293deb9119f1e601f1410e71f9a77fadbfd2f
SHA256

323491ec3f998e2beb73e4e600d7fd4f728fc849e244dc06ff4c6f81e6ba47f6
SHA512

2f0e391ea318f87345a7d08b8df4851ccabec54d2b4d5e889a623047eea27fdeb108fca1870b86dd8e4b8c95f577125bcc6442fbd7078573795b0346a6f8e76b
SSDEEP

768:+txwjZi2PrqdiCfSkQMbZxhbYuRtdP7g1PVNokSAe2B0pmZ:FLqvQVuGqJmZ

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2620	2748	WerFault.exe	17

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2720 wrote to memory of 2748	2720	rundll32.exe	17
PID 2720 wrote to memory of 2748	2720	rundll32.exe	17
PID 2720 wrote to memory of 2748	2720	rundll32.exe	17
PID 2720 wrote to memory of 2748	2720	rundll32.exe	17
PID 2720 wrote to memory of 2748	2720	rundll32.exe	17
PID 2720 wrote to memory of 2748	2720	rundll32.exe	17
PID 2720 wrote to memory of 2748	2720	rundll32.exe	17
PID 2748 wrote to memory of 2620	2748	rundll32.exe	22
PID 2748 wrote to memory of 2620	2748	rundll32.exe	22
PID 2748 wrote to memory of 2620	2748	rundll32.exe	22
PID 2748 wrote to memory of 2620	2748	rundll32.exe	22

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0df5d813039330c7467303f8d8dce955.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2720
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0df5d813039330c7467303f8d8dce955.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2748
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2748 -s 216
    3⤵
    - Program crash
    PID:2620

memory/2748-0-0x0000000013140000-0x000000001314D000-memory.dmp

Filesize
52KB

Download