bcbf9741cb7ab6917b6b57e85a3f412072cfa6bef4de370bf6adb38fc045d9e1

Analysis

max time kernel
148s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
12/01/2024, 01:32

Target

551fb0a2cc4091b1bf0f6c517c7aeb6a.dll
Size

43KB
MD5

551fb0a2cc4091b1bf0f6c517c7aeb6a
SHA1

4505b8f25522cdf95dd79b16b2f739fee55b15db
SHA256

bcbf9741cb7ab6917b6b57e85a3f412072cfa6bef4de370bf6adb38fc045d9e1
SHA512

d53151e9f077d00beb0e114006ac265c85b6aa20bb9c3e5c41f1287b03635a1c28161805a1aaf7c1fc762ecffcf620dbb09f70c6f22aadb5d89bf3b2780f1dfa
SSDEEP

768:ECSqWQ1geCiG8Lij9DM6iO5OpBlonnxGVSEUfT63+6XfQ1VFSZmx4jL1:zSqWQGP8LiBA6iGOpBloxGUCO6XY1VF4

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3164 wrote to memory of 1660	3164	regsvr32.exe	14
PID 3164 wrote to memory of 1660	3164	regsvr32.exe	14
PID 3164 wrote to memory of 1660	3164	regsvr32.exe	14

C:\Windows\SysWOW64\regsvr32.exe
/s C:\Users\Admin\AppData\Local\Temp\551fb0a2cc4091b1bf0f6c517c7aeb6a.dll
1⤵
PID:1660

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\551fb0a2cc4091b1bf0f6c517c7aeb6a.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:3164