60dd800f85a9dd00da19f86baf98890f6d0bba76a88afd7042964ffb1f6a4df2

Analysis

max time kernel
119s
max time network
119s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
23/01/2024, 13:39

Target

60dd800f85a9dd00da19f86baf98890f6d0bba76a88afd7042964ffb1f6a4df2.dll
Size

262KB
MD5

399107ec76ee6e41688691256f2afe38
SHA1

1d1ca50981601aa02b2e5df1fe65136df1f15608
SHA256

60dd800f85a9dd00da19f86baf98890f6d0bba76a88afd7042964ffb1f6a4df2
SHA512

912a8add6883b8c25b3a2495d522d42cd4fb61d1bcf0cb034a6fe66f1cefce5103e140f7059bfce51a1a2bceb34b1b5b01712bd8c932bfa5e87ea72ef73f27d6
SSDEEP

3072:G5VpR62yxUcfV5SWCeLImuwGun8+q7PYyM2a9JIGKCMcnfCGbUsNs+biyptQgJCv:GrpRCzLjQ7uK+69sNyyIgJCyXGcA

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 1992 wrote to memory of 2144	1992	rundll32.exe	28
PID 1992 wrote to memory of 2144	1992	rundll32.exe	28
PID 1992 wrote to memory of 2144	1992	rundll32.exe	28
PID 1992 wrote to memory of 2144	1992	rundll32.exe	28
PID 1992 wrote to memory of 2144	1992	rundll32.exe	28
PID 1992 wrote to memory of 2144	1992	rundll32.exe	28
PID 1992 wrote to memory of 2144	1992	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\60dd800f85a9dd00da19f86baf98890f6d0bba76a88afd7042964ffb1f6a4df2.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1992
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\60dd800f85a9dd00da19f86baf98890f6d0bba76a88afd7042964ffb1f6a4df2.dll,#1
  2⤵
  PID:2144