761c49122bcb7508736d294eb0196f9e5154bef243207de98fab37428dc9f754

Analysis

max time kernel
145s
max time network
109s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
31/12/2023, 22:39

Target

3b3ecbc98000f37ab085f36db3918172.dll
Size

7KB
MD5

3b3ecbc98000f37ab085f36db3918172
SHA1

e820fc4a9d3aec8cd410ce5c4683e64fc13e9f19
SHA256

761c49122bcb7508736d294eb0196f9e5154bef243207de98fab37428dc9f754
SHA512

2efed6e0b4f6c0e2392fc83007c952a3469e3cfeaa72cc8380236a6c7bc817c63b5253a389efb766c73572b0c2c4b41cbc555255e327cfe206f9c1778f447f75
SSDEEP

96:/dlhi/yzm0HuT0ImD4tecrb8G0QQ4Dsa3lyW/+7y+4uo9h56b25f:V4yzzuT0OtWGJQ4Doe+4uo9ubS

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4728 wrote to memory of 3704	4728	rundll32.exe	16
PID 4728 wrote to memory of 3704	4728	rundll32.exe	16
PID 4728 wrote to memory of 3704	4728	rundll32.exe	16

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\3b3ecbc98000f37ab085f36db3918172.dll,#1
1⤵
PID:3704

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\3b3ecbc98000f37ab085f36db3918172.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4728