04f8b1213caad2b3113503e9734d9ee4b661934a8ad2ffc87912671edddd5202

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
24/02/2024, 20:51

Target

a2ba35a86bbc0208f3c116558d86890c.dll
Size

24KB
MD5

a2ba35a86bbc0208f3c116558d86890c
SHA1

0422f8b927cc99975c810419f84627c904e75cfb
SHA256

04f8b1213caad2b3113503e9734d9ee4b661934a8ad2ffc87912671edddd5202
SHA512

a1fa5250464a0aa6d8409ba3937443053524df57ebae30b5014b9e1954f7c38e4bf90446b029f8eba6a705e8a29615f3f9a19c7699aff22447f59e118543a6e8
SSDEEP

384:aTybFFk0b8tTmUp03kTnWD29RkmaVQP485cPf5UtF5yiF8pixRWmXK:aubnkLtTmUq3kTW2VaSP485c+JyiF80X

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2924-0-0x0000000000400000-0x0000000000413000-memory.dmp	upx
behavioral1/memory/2924-1-0x0000000000400000-0x0000000000413000-memory.dmp	upx

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2912 wrote to memory of 2924	2912	rundll32.exe	18
PID 2912 wrote to memory of 2924	2912	rundll32.exe	18
PID 2912 wrote to memory of 2924	2912	rundll32.exe	18
PID 2912 wrote to memory of 2924	2912	rundll32.exe	18
PID 2912 wrote to memory of 2924	2912	rundll32.exe	18
PID 2912 wrote to memory of 2924	2912	rundll32.exe	18
PID 2912 wrote to memory of 2924	2912	rundll32.exe	18

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\a2ba35a86bbc0208f3c116558d86890c.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2912
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\a2ba35a86bbc0208f3c116558d86890c.dll,#1
  2⤵
  PID:2924

memory/2924-0-0x0000000000400000-0x0000000000413000-memory.dmp

Filesize
76KB

Download
memory/2924-1-0x0000000000400000-0x0000000000413000-memory.dmp

Filesize
76KB

Download
memory/2924-2-0x0000000000400000-0x0000000000413000-memory.dmp

Filesize
76KB

Download