77a4eb913e5bc068fe1479f6da9bd2b31303b6d23c7e353dde2984fa373273f2

Analysis

max time kernel
117s
max time network
120s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
24/02/2024, 10:24

Target

77a4eb913e5bc068fe1479f6da9bd2b31303b6d23c7e353dde2984fa373273f2.dll
Size

1.7MB
MD5

b9bab3b367c53472908741b774fce358
SHA1

987e358915e7bb78491a65073189642f88d0d823
SHA256

77a4eb913e5bc068fe1479f6da9bd2b31303b6d23c7e353dde2984fa373273f2
SHA512

60b3858901df2ad51db7efde8673fd17c529c09029247d6bfb6565031d53d00b1d554ba558b0440a00c961204b0bb812d0f9ceef16a7fc1934f6b1a5efa91745
SSDEEP

24576:oLB2ycglUr6G8epqFMyn9w44NBdzHq5FmBq7Wk2zjt:gB2GUr1882ANBdzHq5B7WlF

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2248 wrote to memory of 2212	2248	rundll32.exe	28
PID 2248 wrote to memory of 2212	2248	rundll32.exe	28
PID 2248 wrote to memory of 2212	2248	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\77a4eb913e5bc068fe1479f6da9bd2b31303b6d23c7e353dde2984fa373273f2.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2248
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2248 -s 124
  2⤵
  PID:2212