59f04e2efb60cee2875f3ce59e9b3fc80c2c50ce937fe1bc200eff3cb8a79aaf

Analysis

max time kernel
147s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
10/01/2024, 23:15

Target

51e3a423e9250dfd776f3809efa202f7.dll
Size

28KB
MD5

51e3a423e9250dfd776f3809efa202f7
SHA1

1c1922f6b071755de5733ecb9ce4b30f11553077
SHA256

59f04e2efb60cee2875f3ce59e9b3fc80c2c50ce937fe1bc200eff3cb8a79aaf
SHA512

47a71223adcb4878916026bd4cac79d9861576b17194db0f76f81c6763d5c4f3c183fc777a8a2e87ff76f238db25b09dc61beb221d35b7867f15e35c42a93028
SSDEEP

192:sGjJLxius6x2zAPdyXfEQBu42qQxuBBQ6PRQkTQ8Rs1Pm:/+usSi1BhYuBBQARQkTds1Pm

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 5060 wrote to memory of 964	5060	rundll32.exe	14
PID 5060 wrote to memory of 964	5060	rundll32.exe	14
PID 5060 wrote to memory of 964	5060	rundll32.exe	14

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\51e3a423e9250dfd776f3809efa202f7.dll,#1
1⤵
PID:964

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\51e3a423e9250dfd776f3809efa202f7.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:5060