882ef4188b23ac62d852aafe6c3988c2d2b25d2af605f9483a376d473bec47b3

Analysis

max time kernel
143s
max time network
136s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 14:21

Target

39a11cbbe138caacaff8d2c94662e5a2.dll
Size

13.1MB
MD5

39a11cbbe138caacaff8d2c94662e5a2
SHA1

3d647d0133587eb96dd50396af96593c8029b793
SHA256

882ef4188b23ac62d852aafe6c3988c2d2b25d2af605f9483a376d473bec47b3
SHA512

8c39208bc049cd818ecb45646ea8152cbe6560392ff63b6d97c97e91fbbce95f2be073b37fc2d53b9dd0b81113d2856594bf9f8b0e0379495147314e294efe24
SSDEEP

196608:Fg/boOtHE8FPTQ8BJ1rCVhI7s4L/bwjiWv3crpYp:iToX8FM8RCWs4L/lWv3clY

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1192	2208	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2648 wrote to memory of 2208	2648	rundll32.exe	28
PID 2648 wrote to memory of 2208	2648	rundll32.exe	28
PID 2648 wrote to memory of 2208	2648	rundll32.exe	28
PID 2648 wrote to memory of 2208	2648	rundll32.exe	28
PID 2648 wrote to memory of 2208	2648	rundll32.exe	28
PID 2648 wrote to memory of 2208	2648	rundll32.exe	28
PID 2648 wrote to memory of 2208	2648	rundll32.exe	28
PID 2208 wrote to memory of 1192	2208	rundll32.exe	29
PID 2208 wrote to memory of 1192	2208	rundll32.exe	29
PID 2208 wrote to memory of 1192	2208	rundll32.exe	29
PID 2208 wrote to memory of 1192	2208	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\39a11cbbe138caacaff8d2c94662e5a2.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2648
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\39a11cbbe138caacaff8d2c94662e5a2.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2208
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2208 -s 356
    3⤵
    - Program crash
    PID:1192

memory/2208-0-0x00000000022F0000-0x000000000300E000-memory.dmp

Filesize
13.1MB

Download
memory/2208-2-0x00000000022F0000-0x000000000300E000-memory.dmp

Filesize
13.1MB

Download