e135656d6b7ef7505f5570f934dd8bf8426e6590a0fdaf9d7d96b9ab5443601e

Analysis

max time kernel
145s
max time network
174s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
31/12/2023, 03:03

Target

259db3ac2bf82eaa0d7767dd35860cb8.dll
Size

569KB
MD5

259db3ac2bf82eaa0d7767dd35860cb8
SHA1

3755d96843b76d90590abd58a5a0a5784c7d8eae
SHA256

e135656d6b7ef7505f5570f934dd8bf8426e6590a0fdaf9d7d96b9ab5443601e
SHA512

9296c4769f587327731759e02a7363297356242939d3495cf097c9430d371459da96d51cb735217cb60188f33f4541cc23f861a713494d5118abc4e5231fc53c
SSDEEP

12288:ze5EaX2NnIe2g/lD7hI/aWS6ec/rZ01++TQvupjBd8TkJiwaPiW:C+aXwnIe2Yi/aWS6eKiTQ4BmTsaq

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

pid	Process
2508	rundll32.exe

Program crash 1 IoCs

pid	pid_target	Process	procid_target
976	2508	WerFault.exe	88

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1260 wrote to memory of 2508	1260	rundll32.exe	88
PID 1260 wrote to memory of 2508	1260	rundll32.exe	88
PID 1260 wrote to memory of 2508	1260	rundll32.exe	88

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\259db3ac2bf82eaa0d7767dd35860cb8.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1260
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\259db3ac2bf82eaa0d7767dd35860cb8.dll,#1
  2⤵
  - Suspicious use of NtSetInformationThreadHideFromDebugger
  PID:2508
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2508 -s 564
    3⤵
    - Program crash
    PID:976

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 2508 -ip 2508
1⤵
PID:4040

memory/2508-0-0x0000000074C60000-0x000000007542F000-memory.dmp

Filesize
7.8MB

Download
memory/2508-1-0x0000000074C60000-0x000000007542F000-memory.dmp

Filesize
7.8MB

Download
memory/2508-5-0x0000000074C60000-0x000000007542F000-memory.dmp

Filesize
7.8MB

Download