d1a922bd489ac8a8a9527c75899aa26ec4ef875ba3785da76ed87273a16168a6

Analysis

max time kernel
146s
max time network
112s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
08/01/2024, 00:51

Target
4a3a704b5d3cc7e7fcdca8216412b9d7.dll
Size 92KB
Sample240108-a7m8eaaea5
SHA256 d1a922bd489ac8a8a9527c75899aa26ec4ef875ba3785da76ed87273a16168a6
MD5 4a3a704b5d3cc7e7fcdca8216412b9d7
SHA1 8f3e18583f7e02e8bfd58f66e724c8e84d21505a
SHA512 c6ef8c835cc320a96847544dfc7a3e1b2c3cfec77c6c3d117db662e84aa430d5d5339b312b2d96b7f9b4658b2313ab3d4b4b819fcd71ca554291224bfa50386f
SSDEEP 1536:hzq5NUQFaa0GXR3BmNHrw9uW/Po9c+YnKE795grO2Qu7ZVcSVAiIQoLID99:ENUhHIZQNHs9uuPo2+YnKqHgrO2QsZ7r
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2664 wrote to memory of 920	2664	rundll32.exe	14
PID 2664 wrote to memory of 920	2664	rundll32.exe	14
PID 2664 wrote to memory of 920	2664	rundll32.exe	14

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4a3a704b5d3cc7e7fcdca8216412b9d7.dll,#1
1⤵
PID:920

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4a3a704b5d3cc7e7fcdca8216412b9d7.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2664