9242bc04e3e5ae78134a1acd5ac68e3f20e0187b1487e65ea2b0977c5149df7f

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 04:06

Target

2775ef73c7504584039f885a3d32f55d.dll
Size

33KB
MD5

2775ef73c7504584039f885a3d32f55d
SHA1

bab01a02da85e4d7ef12157860043358582ba4c2
SHA256

9242bc04e3e5ae78134a1acd5ac68e3f20e0187b1487e65ea2b0977c5149df7f
SHA512

9649c6743b9d6dfc679ee6a660b64ced50560c0bd8d9b5b87800547602369dd7e3368dd5f4360c617847be9b7e492b73b3882eef6fc28ca939130c69065ba5b6
SSDEEP

384:pI4xxXNWM07WEnX4kDGDykI9K3xL9pL7ysp8DDzdy3u37upF+L6DdQRkkyk0RRaq:ZjEZwy1+Pv1pWDhy67uTlDdQWtMY4MN

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 1252 wrote to memory of 2752	1252	rundll32.exe	14
PID 1252 wrote to memory of 2752	1252	rundll32.exe	14
PID 1252 wrote to memory of 2752	1252	rundll32.exe	14
PID 1252 wrote to memory of 2752	1252	rundll32.exe	14
PID 1252 wrote to memory of 2752	1252	rundll32.exe	14
PID 1252 wrote to memory of 2752	1252	rundll32.exe	14
PID 1252 wrote to memory of 2752	1252	rundll32.exe	14

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2775ef73c7504584039f885a3d32f55d.dll,#1
1⤵
PID:2752

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2775ef73c7504584039f885a3d32f55d.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1252