1c784c1734d86a38d44860b96511ec43f4db14bbd4db812131502b4094b464d7

Analysis

max time kernel
165s
max time network
180s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
10/01/2024, 15:45

Target

50f88e3fbf6e263f93ce5f1a042ead26.dll
Size

43KB
MD5

50f88e3fbf6e263f93ce5f1a042ead26
SHA1

adf64ab5e6830e2f7e28680ce4120b9e4703797a
SHA256

1c784c1734d86a38d44860b96511ec43f4db14bbd4db812131502b4094b464d7
SHA512

ca4792396559392dcadca48c398cb7dee0161050e180d475a78a4460d7224c08aab20964d3aee03c4ab65927a647ff2f7c27a8c00751de98e2c48ad696757154
SSDEEP

768:Z88F+8S1Rh3eBh3mcu/v6Yysq/mD3cDCAPkVkFlW6dv4KydEsQb3JB:ZjS3U3mcu/AsJwJPkVok6dwFuB

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3864 wrote to memory of 2044	3864	regsvr32.exe	92
PID 3864 wrote to memory of 2044	3864	regsvr32.exe	92
PID 3864 wrote to memory of 2044	3864	regsvr32.exe	92

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\50f88e3fbf6e263f93ce5f1a042ead26.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:3864
- C:\Windows\SysWOW64\regsvr32.exe
  /s C:\Users\Admin\AppData\Local\Temp\50f88e3fbf6e263f93ce5f1a042ead26.dll
  2⤵
  PID:2044