e32401da33702a078b434fc8a3e8270d17c3df6647a4683fe8618cf492d1202e

Analysis

max time kernel
120s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 06:20

Target

10eb82d562a462052b4013e4af8615cf.dll
Size

62KB
MD5

10eb82d562a462052b4013e4af8615cf
SHA1

ada82bb8e3d281019023ab073ae7aea513b46fee
SHA256

e32401da33702a078b434fc8a3e8270d17c3df6647a4683fe8618cf492d1202e
SHA512

f11c4a5e6ca7e6539df76d8061855d9e425f4c6e606555fe2ea0dcd1176cdf179ec48272fe234a9a3bebcc4faee86e77b965b33d85c90b42c45d949c995d7d5c
SSDEEP

768:ZQ/BqAAAdasuMRVhBUphv3bUPHRWaaan3FUr5h6EmNS6:ZeBqAAc/ukBUAGG3F05NmNS6

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2072	2184	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 1320 wrote to memory of 2184	1320	rundll32.exe	28
PID 1320 wrote to memory of 2184	1320	rundll32.exe	28
PID 1320 wrote to memory of 2184	1320	rundll32.exe	28
PID 1320 wrote to memory of 2184	1320	rundll32.exe	28
PID 1320 wrote to memory of 2184	1320	rundll32.exe	28
PID 1320 wrote to memory of 2184	1320	rundll32.exe	28
PID 1320 wrote to memory of 2184	1320	rundll32.exe	28
PID 2184 wrote to memory of 2072	2184	rundll32.exe	29
PID 2184 wrote to memory of 2072	2184	rundll32.exe	29
PID 2184 wrote to memory of 2072	2184	rundll32.exe	29
PID 2184 wrote to memory of 2072	2184	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\10eb82d562a462052b4013e4af8615cf.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1320
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\10eb82d562a462052b4013e4af8615cf.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2184
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2184 -s 196
    3⤵
    - Program crash
    PID:2072

memory/2184-0-0x0000000010000000-0x0000000010027000-memory.dmp

Filesize
156KB

Download