542bce6778945fa022d6bbff4c2e6c2ab0082c3eec41b28884fcdf01f6965e31

Analysis

max time kernel
146s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
08-01-2024 12:50

Target

4b7bc07ceb073e8a37ca85ce2f4b1e42.dll
Size

66KB
MD5

4b7bc07ceb073e8a37ca85ce2f4b1e42
SHA1

afdaa76c186c650e275da813e1ce450a2b3ce3f3
SHA256

542bce6778945fa022d6bbff4c2e6c2ab0082c3eec41b28884fcdf01f6965e31
SHA512

fe6092ea1fe54683709742328bb4f01e40134882ee3ca5153446ba47b88bcb5b3bc062b79b9c37f77303bf331fe1e5e043911096fc645a973405c61195560fff
SSDEEP

1536:azTp4AdaT9EAiXkBPY4s+EK01gfnlYwIWL1BdpUDnWC6apaFB6tB:7nhEAeoPj0mfnWzu1B0paf4

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 5040 wrote to memory of 4804	5040	rundll32.exe	14
PID 5040 wrote to memory of 4804	5040	rundll32.exe	14
PID 5040 wrote to memory of 4804	5040	rundll32.exe	14

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4b7bc07ceb073e8a37ca85ce2f4b1e42.dll,#1
1⤵
PID:4804

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4b7bc07ceb073e8a37ca85ce2f4b1e42.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:5040