bc7677052c49da89339152557417dc10c3a81716a59aeb9b2b23f10c24a21f30

Analysis

max time kernel
120s
max time network
120s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
13-01-2024 20:52

Target

5963116d33d3f5428af4809e1a4c78e7.dll
Size

80KB
MD5

5963116d33d3f5428af4809e1a4c78e7
SHA1

f3390a35b5d0faf3d66e44e776d4e659e7d471d5
SHA256

bc7677052c49da89339152557417dc10c3a81716a59aeb9b2b23f10c24a21f30
SHA512

2a87990ceed616c42f745b4ccf310def6c88590677e8a15421f01f4ef6b3031bc72e93cd8933c1320846126489f4c8f6c07f2ed47b9be05b9d6facc35af455bc
SSDEEP

1536:o/ELy33wYpYCFd03SA+7d34w+CMep6Pe00chXKR7mGGkdc16nN9KCckuTCxNzwTw:hy3AVk2xmW5VSqwa4uAI8

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2316 wrote to memory of 2192	2316	rundll32.exe	28
PID 2316 wrote to memory of 2192	2316	rundll32.exe	28
PID 2316 wrote to memory of 2192	2316	rundll32.exe	28
PID 2316 wrote to memory of 2192	2316	rundll32.exe	28
PID 2316 wrote to memory of 2192	2316	rundll32.exe	28
PID 2316 wrote to memory of 2192	2316	rundll32.exe	28
PID 2316 wrote to memory of 2192	2316	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\5963116d33d3f5428af4809e1a4c78e7.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2316
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\5963116d33d3f5428af4809e1a4c78e7.dll,#1
  2⤵
  PID:2192