1f6c27d67c4779d6cff61338476ede3f73a611fee1cd25dbcf86d7649f6f3f4a

Resubmissions

29/09/2024, 23:32

29/09/2024, 23:30

25/09/2024, 18:11

29/07/2024, 03:17

11/03/2024, 21:36

11/03/2024, 21:33

14/01/2024, 19:59

14/01/2024, 19:38

max time kernel
146s
max time network
149s
platform
windows11-21h2_x64
resource
win11-20231222-en
resource tags

arch:x64arch:x86image:win11-20231222-enlocale:en-usos:windows11-21h2-x64system
submitted
14/01/2024, 19:59

Target

ERROR437_02/natives/jinput-raw.dll
Size

58KB
MD5

f38ab7d21d437375c987f6de821d6679
SHA1

055242e9103e4af3e9068eb756eb4ebea526d1f4
SHA256

21b53d09a26d3de95a8409e123cfa33ce95a268264f1d2658ed8d8f76af70876
SHA512

011ba785c47dfce4acce7921652e989a65230a16edbb780df3d5dc6551ed6950cee5b138deaaf6f6891fec57473bd171f10b235a530c7ca6e727c064fe657edc
SSDEEP

768:HxAM8x3LQmQhccHXx+LHfFCxMJvI/+q9c6LTZsTUkwS9/FE5HBXTWoJCRX:WDI3+jFWTLTiUknG5NT9JMX

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2480 wrote to memory of 3312	2480	rundll32.exe	80
PID 2480 wrote to memory of 3312	2480	rundll32.exe	80
PID 2480 wrote to memory of 3312	2480	rundll32.exe	80

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\ERROR437_02\natives\jinput-raw.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2480
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\ERROR437_02\natives\jinput-raw.dll,#1
  2⤵
  PID:3312