58be738d9e9d2aeb3814cca2d4022557db8c8bf8644e4296ba8b4c952f42036d

Analysis

max time kernel
141s
max time network
62s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
09-01-2024 14:38

Target

4e90367c77ab9eee0d491f1c16736ef9.dll
Size

30KB
MD5

4e90367c77ab9eee0d491f1c16736ef9
SHA1

4f2264d489a2e1d069b57e91ab77c9b94233711f
SHA256

58be738d9e9d2aeb3814cca2d4022557db8c8bf8644e4296ba8b4c952f42036d
SHA512

5314c61d5930b109703947b652db974b8cc66cfc5eedfc6342e8fd1b7f5cc42070765fa0728f4b6a6d0adb6dd7ffd12861f88da32806f3015077f874ee6d9a37
SSDEEP

384:W59+PbhI7kZp9W/r2AokGiy3w0ccRVxWlwtXORsQy1jZ+x0zNxbM8Uxc0VQv8sI+:++ThI7GAA1fccTxW6CsVNY05ZIc0fsw

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1508 wrote to memory of 3276	1508	regsvr32.exe	16
PID 1508 wrote to memory of 3276	1508	regsvr32.exe	16
PID 1508 wrote to memory of 3276	1508	regsvr32.exe	16

C:\Windows\SysWOW64\regsvr32.exe
/s C:\Users\Admin\AppData\Local\Temp\4e90367c77ab9eee0d491f1c16736ef9.dll
1⤵
PID:3276

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\4e90367c77ab9eee0d491f1c16736ef9.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:1508