9c76fc27a455c5bf228dca20871e428d1939e70a8d30dc45ef7d22685864d061

Analysis

max time kernel
122s
max time network
141s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 08:20

Target

1344a82681f9769bfd0e39a3203b056d.dll
Size

42KB
MD5

1344a82681f9769bfd0e39a3203b056d
SHA1

9635803ef58fd3fb385e46bbb035f00baea2ac2f
SHA256

9c76fc27a455c5bf228dca20871e428d1939e70a8d30dc45ef7d22685864d061
SHA512

d0bd9c70607b4802f78faf577f6f900f7ef9ea68eb1be1138991e184f5e6ff8b94c28a8210965ea344d6477225f9348fb2ea46f3f2a9fac8029aace64daac0a9
SSDEEP

768:oebDANI3AtVNI30msRVQYmRRdutI28hqnu+tYdXddRo2TzE8Nxda976fuXK:oebD0c3wQYmRRduh6R+tGXL3E8Ns1K

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2448 wrote to memory of 2712	2448	rundll32.exe	27
PID 2448 wrote to memory of 2712	2448	rundll32.exe	27
PID 2448 wrote to memory of 2712	2448	rundll32.exe	27
PID 2448 wrote to memory of 2712	2448	rundll32.exe	27
PID 2448 wrote to memory of 2712	2448	rundll32.exe	27
PID 2448 wrote to memory of 2712	2448	rundll32.exe	27
PID 2448 wrote to memory of 2712	2448	rundll32.exe	27

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1344a82681f9769bfd0e39a3203b056d.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2448
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1344a82681f9769bfd0e39a3203b056d.dll,#1
  2⤵
  PID:2712