8257389d6264742d414404beaaaac869336c91f9f9af1e31ee081aa6e7857f3c

Resubmissions

19/01/2024, 19:16

19/01/2024, 14:16

max time kernel
119s
max time network
143s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
19/01/2024, 14:16

Target

lib/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-ico.dll
Size

28KB
MD5

b53255ccd3a0174b6f14fbdfe1b3b3c4
SHA1

5bf6460a14c61e89eb37361ba93f227074f5e4e0
SHA256

18e97911fbc619d31a95e58a2511a4b14d75c58cf0a22757e0f44f18f1b9248e
SHA512

29deb6d6ff70042b0a2a1d7552b037390c194a38d115d9bf4b1f8f7979ba393ab88c62fd47214d68646a749028173943082671a81b92ecafe1285c479d62982a
SSDEEP

384:CAE1Boj1OL7mqDC+9t8QYMWYuUTocqqwCxQWsTGi3:CAE/oxumcC+9oMzuUToJ2QyU

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2900 wrote to memory of 2124	2900	rundll32.exe	28
PID 2900 wrote to memory of 2124	2900	rundll32.exe	28
PID 2900 wrote to memory of 2124	2900	rundll32.exe	28
PID 2900 wrote to memory of 2124	2900	rundll32.exe	28
PID 2900 wrote to memory of 2124	2900	rundll32.exe	28
PID 2900 wrote to memory of 2124	2900	rundll32.exe	28
PID 2900 wrote to memory of 2124	2900	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-ico.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2900
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-ico.dll,#1
  2⤵
  PID:2124