95b69d022d8cfe64cf23b73acc06c34a6328d348f9cad93de79f7da9b5b88dda

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
19/01/2024, 06:29

Target

66ee0f8eb0b0f4f5e19d86872a5950f7.dll
Size

300KB
MD5

66ee0f8eb0b0f4f5e19d86872a5950f7
SHA1

af5bc6c5ca81a597b215b6f71b8c0c86b28f1379
SHA256

95b69d022d8cfe64cf23b73acc06c34a6328d348f9cad93de79f7da9b5b88dda
SHA512

10b055cc546f7ed173d411cfa0620ebfb43bb21e2513c25332d74782197c6eca00ce92489215c9684f3a616086ec6d5466de4e703896ef07f0c1c78bab479a7d
SSDEEP

6144:ThbAGn9taURe2H8wUY+nvJCYH/N0CdSIIN4mgORRtb9:TZAGnLaUULG+nvJCYH/N0C84mgORp

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2360 wrote to memory of 2180	2360	rundll32.exe	28
PID 2360 wrote to memory of 2180	2360	rundll32.exe	28
PID 2360 wrote to memory of 2180	2360	rundll32.exe	28
PID 2360 wrote to memory of 2180	2360	rundll32.exe	28
PID 2360 wrote to memory of 2180	2360	rundll32.exe	28
PID 2360 wrote to memory of 2180	2360	rundll32.exe	28
PID 2360 wrote to memory of 2180	2360	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\66ee0f8eb0b0f4f5e19d86872a5950f7.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2360
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\66ee0f8eb0b0f4f5e19d86872a5950f7.dll,#1
  2⤵
  PID:2180