a2d6989b51c067122484a897fbae2cfffa34750180f76d79bc069f2ff6b71c54

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
11/01/2024, 13:48

Target

53af2f0cf61876f0fc047f1a1b91f81c.dll
Size

92KB
MD5

53af2f0cf61876f0fc047f1a1b91f81c
SHA1

84629076a9f6931908f3d71a465145736ef58644
SHA256

a2d6989b51c067122484a897fbae2cfffa34750180f76d79bc069f2ff6b71c54
SHA512

5020b624a9224e126d9052ab9b79e3e9c9cb4c3293df20d0b4d282d8ac51198c5f1b0a165f8e75f5a7d361ae3015016e692dc4fe7feed47a46c11d75e728b8b6
SSDEEP

768:AXlmaMvhxrdneStK7vaYXJeMX0D9+2vPZggtWE2HlZdXRO8OxENUhXUUJXlLorAf:N/tV+P3J2vRruvulkjCphXMtFDr2C

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2536 wrote to memory of 2456	2536	rundll32.exe	16
PID 2536 wrote to memory of 2456	2536	rundll32.exe	16
PID 2536 wrote to memory of 2456	2536	rundll32.exe	16
PID 2536 wrote to memory of 2456	2536	rundll32.exe	16
PID 2536 wrote to memory of 2456	2536	rundll32.exe	16
PID 2536 wrote to memory of 2456	2536	rundll32.exe	16
PID 2536 wrote to memory of 2456	2536	rundll32.exe	16

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\53af2f0cf61876f0fc047f1a1b91f81c.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2536
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\53af2f0cf61876f0fc047f1a1b91f81c.dll,#1
  2⤵
  PID:2456