75e763d55ea8c2fea4282b60e24e520d957f9746e7a9e206a81c3b080657235a

Analysis

max time kernel
93s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
04-02-2024 15:38

Target

8f86034e65fa74fabf0ae413608e084f.dll
Size

123KB
MD5

8f86034e65fa74fabf0ae413608e084f
SHA1

417108876214e9e4f423868115ed0a945514a2c4
SHA256

75e763d55ea8c2fea4282b60e24e520d957f9746e7a9e206a81c3b080657235a
SHA512

017d35d98f5719b5635a22c7ea9b9025f1ec452c581adea1b4bfedfbaf2715f1a57d1e452f41c19eccbbb821e4615cdcd8f30e343aa8d30e4caaf4d4be3b8bd6
SSDEEP

3072:r7jOdevvQK6c5hDvswaiMZE3IByF9ROQqB78voUwcef8Bz:jOEv36khDv+SIUF3OQqBwv

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1916	4508	WerFault.exe	14

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4464 wrote to memory of 4508	4464	rundll32.exe	14
PID 4464 wrote to memory of 4508	4464	rundll32.exe	14
PID 4464 wrote to memory of 4508	4464	rundll32.exe	14

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\8f86034e65fa74fabf0ae413608e084f.dll,#1
1⤵
PID:4508
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4508 -s 596
  2⤵
  - Program crash
  PID:1916

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\8f86034e65fa74fabf0ae413608e084f.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4464

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 4508 -ip 4508
1⤵
PID:3900