f3065f783ab8f3e567fca5295887c52981ae5c5e95fd6bd84688e9c2a44a6309

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
20/02/2024, 12:31

Target

RzChromaSDK64.dll
Size

261KB
MD5

d8b8880665602a13d38db12120ec05bb
SHA1

a02e90b847a517b01b701abc42f10c1e65fa101f
SHA256

f3065f783ab8f3e567fca5295887c52981ae5c5e95fd6bd84688e9c2a44a6309
SHA512

3809b23e73b666e9eb745fd3c3026bdc9cb44bcebd0b6132feabf724f7130ad3ed4387dc46754f3a1be514f2898ba03525af1bf7c651d27d796a21180c5e8066
SSDEEP

6144:iysCCqxP3QvmazKLVZwjtxpERzbQkRXHypNMeGkmGqJbrPT:ieAXaxXHsfG/XL

Score

1^/10

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
2944	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\RzChromaSDK64.dll,#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2944

memory/2944-0-0x000007FEF7D10000-0x000007FEF7D68000-memory.dmp

Filesize
352KB

Download
memory/2944-1-0x000007FEF75D0000-0x000007FEF7628000-memory.dmp

Filesize
352KB

Download
memory/2944-3-0x000007FEF75D0000-0x000007FEF7628000-memory.dmp

Filesize
352KB

Download
memory/2944-4-0x0000000000290000-0x00000000002C8000-memory.dmp

Filesize
224KB

Download
memory/2944-7-0x000007FEF7D10000-0x000007FEF7D68000-memory.dmp

Filesize
352KB

Download
memory/2944-8-0x000007FEF7D10000-0x000007FEF7D68000-memory.dmp

Filesize
352KB

Download
memory/2944-12-0x000007FEF75D0000-0x000007FEF7628000-memory.dmp

Filesize
352KB

Download
memory/2944-10-0x000007FEF75D0000-0x000007FEF7628000-memory.dmp

Filesize
352KB

Download
memory/2944-9-0x000007FEF75D0000-0x000007FEF7628000-memory.dmp

Filesize
352KB

Download