0efb1db102634ace93f77fedd45a6da7f8cb582882f5d7cd88c5ca04660687bf

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 05:12

Target

2984d50754f3f00bfa3cbcc855e11d18.dll
Size

91KB
MD5

2984d50754f3f00bfa3cbcc855e11d18
SHA1

74f90d3df26cebce914d9e2d3187902b6c77e9f9
SHA256

0efb1db102634ace93f77fedd45a6da7f8cb582882f5d7cd88c5ca04660687bf
SHA512

6714b42aabf0454e442b881f0b3122d6bab4b1e8b5866ed188be023df243b92e4b5d3ff5ac179b41b2f2467fdbe26b6776dbe30d416fe5df063b0c2a3c3756b6
SSDEEP

1536:WsMwhk7sW8+beD1/M9S8N8b8w2p5NKaCg:Wrpu0Yy6ww2p5Nag

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1976	2144	WerFault.exe	16

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 1992 wrote to memory of 2144	1992	rundll32.exe	16
PID 1992 wrote to memory of 2144	1992	rundll32.exe	16
PID 1992 wrote to memory of 2144	1992	rundll32.exe	16
PID 1992 wrote to memory of 2144	1992	rundll32.exe	16
PID 1992 wrote to memory of 2144	1992	rundll32.exe	16
PID 1992 wrote to memory of 2144	1992	rundll32.exe	16
PID 1992 wrote to memory of 2144	1992	rundll32.exe	16
PID 2144 wrote to memory of 1976	2144	rundll32.exe	17
PID 2144 wrote to memory of 1976	2144	rundll32.exe	17
PID 2144 wrote to memory of 1976	2144	rundll32.exe	17
PID 2144 wrote to memory of 1976	2144	rundll32.exe	17

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984d50754f3f00bfa3cbcc855e11d18.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1992
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\2984d50754f3f00bfa3cbcc855e11d18.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2144
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2144 -s 232
    3⤵
    - Program crash
    PID:1976