ed5fe5eb0d0146db50d8848052a4a9177c50ea00c51471f4489f1327370133d4

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
04/02/2024, 09:33

Target

Total Video Converter/SDL.dll
Size

232KB
MD5

9ca1c901f675acc9185c1280d76c3e17
SHA1

2061d576cd9f226f5171722b8c4e1b2d090e3be0
SHA256

af297a03c38973b5df62fa51d0c2646d172a85d5148d7bbf9c74b555082eaf34
SHA512

0e21c9b08b99ddb173f13e97770bf0897be4939f2d1a5965e56af834381b52cd7c775654a79cd6b3cbc5437e5ed50b42d4557a99a678c60ff3633bbd9eb2fc18
SSDEEP

6144:lRS5KKfrrrrrrVmA70I6v1kdEWd4pOFAr+H44bvIe0N14RE:lRoKKfrrrrrrVmE0n8EFOFAMS

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 1972 wrote to memory of 1488	1972	rundll32.exe	18
PID 1972 wrote to memory of 1488	1972	rundll32.exe	18
PID 1972 wrote to memory of 1488	1972	rundll32.exe	18
PID 1972 wrote to memory of 1488	1972	rundll32.exe	18
PID 1972 wrote to memory of 1488	1972	rundll32.exe	18
PID 1972 wrote to memory of 1488	1972	rundll32.exe	18
PID 1972 wrote to memory of 1488	1972	rundll32.exe	18

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Total Video Converter\SDL.dll",#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1972
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Total Video Converter\SDL.dll",#1
  2⤵
  PID:1488