7080569c73fa17f5d348110a93668f1e9733cd943464b1be907a395cebbd3b50

Analysis

max time kernel
140s
max time network
120s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
05/01/2024, 14:31

Target

43ec3c62be835118a6bf4fa3190dc040.dll
Size

841KB
MD5

43ec3c62be835118a6bf4fa3190dc040
SHA1

094faa64b7179c7454a9b9f54325e98c4cac4479
SHA256

7080569c73fa17f5d348110a93668f1e9733cd943464b1be907a395cebbd3b50
SHA512

fb0463a18fd63117aa049ad1c78a7369d2c1263f233d54389346033a677422d6b12ee069cdf61e1fdfa96086e9782746117c99fb37930384d53d0967ebd7114e
SSDEEP

24576:LPIA0kWSWWIYvs5gkbWmQJhFoqZ7FbLaVwes:yyhFoqHWs

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1876	2184	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2532 wrote to memory of 2184	2532	rundll32.exe	28
PID 2532 wrote to memory of 2184	2532	rundll32.exe	28
PID 2532 wrote to memory of 2184	2532	rundll32.exe	28
PID 2532 wrote to memory of 2184	2532	rundll32.exe	28
PID 2532 wrote to memory of 2184	2532	rundll32.exe	28
PID 2532 wrote to memory of 2184	2532	rundll32.exe	28
PID 2532 wrote to memory of 2184	2532	rundll32.exe	28
PID 2184 wrote to memory of 1876	2184	rundll32.exe	29
PID 2184 wrote to memory of 1876	2184	rundll32.exe	29
PID 2184 wrote to memory of 1876	2184	rundll32.exe	29
PID 2184 wrote to memory of 1876	2184	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\43ec3c62be835118a6bf4fa3190dc040.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2532
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\43ec3c62be835118a6bf4fa3190dc040.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2184
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2184 -s 264
    3⤵
    - Program crash
    PID:1876

memory/2184-0-0x0000000000380000-0x000000000045D000-memory.dmp

Filesize
884KB

Download
memory/2184-1-0x0000000000380000-0x000000000045D000-memory.dmp

Filesize
884KB

Download