e19a3cb7c702cefadefffb17ca5af71f00f361d9ff7192a260c6d6112368fd5b

Analysis

max time kernel
139s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
26/01/2024, 16:17

Target

77d0d2da728bb2d31adff8ffa5b36118.dll
Size

7KB
MD5

77d0d2da728bb2d31adff8ffa5b36118
SHA1

449952eac8009c60faa87daa8a7408985a1ddb48
SHA256

e19a3cb7c702cefadefffb17ca5af71f00f361d9ff7192a260c6d6112368fd5b
SHA512

aa2cb97a975de4f28c79159cb2bd310a8d2b2238a0816c684a1fc5c806fb72cfc352738ed628c0ba3be60b52468d0ae637cf457792d5ca51f1dc133e6fc3af89
SSDEEP

48:66ay5YVO3EVkApc2wp8hH1NZn5EquglQ067YbPWObABbgL3q9J5S2hmc:b3EVkApcX4Hiv0hbPQq3qX5S2hV

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2404 wrote to memory of 1776	2404	rundll32.exe	85
PID 2404 wrote to memory of 1776	2404	rundll32.exe	85
PID 2404 wrote to memory of 1776	2404	rundll32.exe	85

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\77d0d2da728bb2d31adff8ffa5b36118.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2404
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\77d0d2da728bb2d31adff8ffa5b36118.dll,#1
  2⤵
  PID:1776