c26fdfed1dc44dda3a807cb6bb173de05c893f0e0b57d2dc78213938239f9c91

Analysis

max time kernel
140s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
06/01/2024, 23:08

Target

4768177f5fc78eb94158d28beb02256b.dll
Size

131KB
MD5

4768177f5fc78eb94158d28beb02256b
SHA1

dbef7579a60adc48e7b2ee3eb8eb88ac02321769
SHA256

c26fdfed1dc44dda3a807cb6bb173de05c893f0e0b57d2dc78213938239f9c91
SHA512

a5261ac2cd4b05b0e4b04259d2d1575bcffaf30764234d83ce42093626cb13b4a1d27f391acb4bd79572abb6dab536180521d33a0443715b9208972a1bec8f5b
SSDEEP

3072:R/2W7kEhM+DhEkLIFaOjLPDuf2Fm4bmX+Esh03k9Yxekfw9KYG:dtNekEFaKufaDbmm00J

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1892	2040	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2180 wrote to memory of 2040	2180	rundll32.exe	28
PID 2180 wrote to memory of 2040	2180	rundll32.exe	28
PID 2180 wrote to memory of 2040	2180	rundll32.exe	28
PID 2180 wrote to memory of 2040	2180	rundll32.exe	28
PID 2180 wrote to memory of 2040	2180	rundll32.exe	28
PID 2180 wrote to memory of 2040	2180	rundll32.exe	28
PID 2180 wrote to memory of 2040	2180	rundll32.exe	28
PID 2040 wrote to memory of 1892	2040	rundll32.exe	29
PID 2040 wrote to memory of 1892	2040	rundll32.exe	29
PID 2040 wrote to memory of 1892	2040	rundll32.exe	29
PID 2040 wrote to memory of 1892	2040	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4768177f5fc78eb94158d28beb02256b.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2180
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4768177f5fc78eb94158d28beb02256b.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2040
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2040 -s 524
    3⤵
    - Program crash
    PID:1892

memory/2040-0-0x0000000000400000-0x0000000000425000-memory.dmp

Filesize
148KB

Download