8dc7f2da53d0154b94bb9616ac4ba56901fb77bc59f9b8ac27e662358f1659ad

Analysis

max time kernel
145s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
06/01/2024, 16:00

Target

46a143b30b7e59e192aa31bf73a0ec58.dll
Size

22KB
MD5

46a143b30b7e59e192aa31bf73a0ec58
SHA1

d0e4b49494d528854450067523ea29038b0520ae
SHA256

8dc7f2da53d0154b94bb9616ac4ba56901fb77bc59f9b8ac27e662358f1659ad
SHA512

d0bf7252e619934958cf30f2c145c7f42f8b13650e966eb5c8fa909243c1c6abe44a021a34ab402bb17b260d64c11171c04a04a2445a089bd5d69a9713611798
SSDEEP

384:e2SYH6OllBVSM0qKcTPZlYBCJVKJlc6MRRBcGH7dpsvzsqNphRB:R6OPBV28NlNxcAdpK7

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1648 wrote to memory of 4596	1648	rundll32.exe	15
PID 1648 wrote to memory of 4596	1648	rundll32.exe	15
PID 1648 wrote to memory of 4596	1648	rundll32.exe	15

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\46a143b30b7e59e192aa31bf73a0ec58.dll,#1
1⤵
PID:4596

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\46a143b30b7e59e192aa31bf73a0ec58.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1648