3350745110e5423764bc65610c7e260a3ca3deff71aa6c796edfd5669bac740e

Analysis

max time kernel
155s
max time network
166s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
17/01/2024, 21:31

Target

3350745110e5423764bc65610c7e260a3ca3deff71aa6c796edfd5669bac740e.dll
Size

1.1MB
MD5

08f732c2f72777d77c286ef1a571e2a4
SHA1

7cfb77fc68c82de49d1ddf8c09abf1fb8569fa32
SHA256

3350745110e5423764bc65610c7e260a3ca3deff71aa6c796edfd5669bac740e
SHA512

387a6c8fabfd3bf288c2f2995b5941e979d6355f6daa45e03a5ca9811fbc55b898826fddc2f3c0dae7019ba2abd78cc244a1ce7efdb2a74a81e040225325a203
SSDEEP

24576:HOS9I5oYUuI85DN4t78Zro8h+h3O3IMy7EC8p:QvU80NO4My7up

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2304	3348	WerFault.exe	86

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
3348	rundll32.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4660 wrote to memory of 3348	4660	rundll32.exe	86
PID 4660 wrote to memory of 3348	4660	rundll32.exe	86
PID 4660 wrote to memory of 3348	4660	rundll32.exe	86

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\3350745110e5423764bc65610c7e260a3ca3deff71aa6c796edfd5669bac740e.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4660
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\3350745110e5423764bc65610c7e260a3ca3deff71aa6c796edfd5669bac740e.dll,#1
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3348
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 3348 -s 656
    3⤵
    - Program crash
    PID:2304

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 3348 -ip 3348
1⤵
PID:4052

memory/3348-0-0x0000000002100000-0x0000000002216000-memory.dmp

Filesize
1.1MB

Download
memory/3348-1-0x00000000005E0000-0x00000000005E1000-memory.dmp

Filesize
4KB

Download
memory/3348-2-0x0000000002100000-0x0000000002216000-memory.dmp

Filesize
1.1MB

Download
memory/3348-3-0x0000000002100000-0x0000000002216000-memory.dmp

Filesize
1.1MB

Download