6696425c1c2c299e22974cfebaef98c7cf57e902b14a649e37ba8d845bef035a

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
25-01-2024 15:54

Target

6696425c1c2c299e22974cfebaef98c7cf57e902b14a649e37ba8d845bef035a.dll
Size

329KB
MD5

26085e74a55b52abd1dd01078a134468
SHA1

02e2528475cd3c96d4a085ee3020f795166d1c9d
SHA256

6696425c1c2c299e22974cfebaef98c7cf57e902b14a649e37ba8d845bef035a
SHA512

7b44748733840ce5c1c27f8fefad60fff8c367678dd6b3bba8ae2b407199bd1e3e1f5c2409e3182bc74bd57d36bb37cda3ef7856eb6c8d4c43888f4e5ff4c4ff
SSDEEP

6144:aF2Ix85CzddJK216gQQjjrAYuerAO7AOJxvi:aUIxHdd516fQjjrAYuert5i

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

Processes:

rundll32.exe

description	pid	process	target process
PID 2380 wrote to memory of 2000	2380	rundll32.exe	rundll32.exe
PID 2380 wrote to memory of 2000	2380	rundll32.exe	rundll32.exe
PID 2380 wrote to memory of 2000	2380	rundll32.exe	rundll32.exe
PID 2380 wrote to memory of 2000	2380	rundll32.exe	rundll32.exe
PID 2380 wrote to memory of 2000	2380	rundll32.exe	rundll32.exe
PID 2380 wrote to memory of 2000	2380	rundll32.exe	rundll32.exe
PID 2380 wrote to memory of 2000	2380	rundll32.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6696425c1c2c299e22974cfebaef98c7cf57e902b14a649e37ba8d845bef035a.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2380

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6696425c1c2c299e22974cfebaef98c7cf57e902b14a649e37ba8d845bef035a.dll,#1
2⤵
PID:2000