c8d459b37ed4ae108b5590edec6cf9683f5cb0ad2201783e576865b8c1b79dad

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
22-01-2024 23:26

Target

CONECTAR MANDO PS3/CABLE/x86/XInput1_3.dll
Size

24KB
MD5

5902e1f90d67ae8b27903a56cd1558d3
SHA1

21a5a73e40d64afb415cbc69fb6c727ec4798e98
SHA256

413e64c394d211b721a5e7b66443cf1b501d509ac8f4c9ffe6fe38d1f93dfacb
SHA512

41c5ecf1f259a711a3dde92584b09138abbfaede0f7de9108776fe633fbe6d126a16887821514aad810a026c179a2cb2898ef02899c9a4d8c1e2658a1cfd54b9
SSDEEP

384:vPcIVBSkh3YZMIVBSk2+wDl+nxD+LR7tsmAGYtNgYjCzGld1tFeRoEK9p7lyI:vPcI/huZMI/h216NyRNAHUGldxnlH

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 876 wrote to memory of 2320	876	rundll32.exe	27
PID 876 wrote to memory of 2320	876	rundll32.exe	27
PID 876 wrote to memory of 2320	876	rundll32.exe	27
PID 876 wrote to memory of 2320	876	rundll32.exe	27
PID 876 wrote to memory of 2320	876	rundll32.exe	27
PID 876 wrote to memory of 2320	876	rundll32.exe	27
PID 876 wrote to memory of 2320	876	rundll32.exe	27

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\CONECTAR MANDO PS3\CABLE\x86\XInput1_3.dll",#1
1⤵
- Suspicious use of WriteProcessMemory
PID:876
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe "C:\Users\Admin\AppData\Local\Temp\CONECTAR MANDO PS3\CABLE\x86\XInput1_3.dll",#1
  2⤵
  PID:2320