3a6532859d2c2e09dca134f6cc30e28f0ecff7355d38e4e1cff00824e10bc33d

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
27/02/2024, 16:28

Target

a99e367a79415649b274c8c19c1262f5.dll
Size

13KB
MD5

a99e367a79415649b274c8c19c1262f5
SHA1

f5da64d49579cee38cdc8f7c0a2fea919b449362
SHA256

3a6532859d2c2e09dca134f6cc30e28f0ecff7355d38e4e1cff00824e10bc33d
SHA512

d0d18c292eee7ed845c2b14738edb7e122a528325308aaa275e789431424ce168da41ed5f1ad0ad681cda6c91289292211c0d65e91543724a0428f9e96851b5e
SSDEEP

192:nnS2Sr4f9W3l0vdV+fM0xbjlYXNMplDN1egkHeU4pOji7+bV/kOrU/lBoFSocNXu:S2Sh2vDSl9TDW57qOG7FKWBo8XqL

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 1968 wrote to memory of 2188	1968	rundll32.exe	28
PID 1968 wrote to memory of 2188	1968	rundll32.exe	28
PID 1968 wrote to memory of 2188	1968	rundll32.exe	28
PID 1968 wrote to memory of 2188	1968	rundll32.exe	28
PID 1968 wrote to memory of 2188	1968	rundll32.exe	28
PID 1968 wrote to memory of 2188	1968	rundll32.exe	28
PID 1968 wrote to memory of 2188	1968	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\a99e367a79415649b274c8c19c1262f5.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1968
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\a99e367a79415649b274c8c19c1262f5.dll,#1
  2⤵
  PID:2188

memory/2188-0-0x0000000000210000-0x0000000000220000-memory.dmp

Filesize
64KB

Download
memory/2188-1-0x0000000000210000-0x0000000000220000-memory.dmp

Filesize
64KB

Download
memory/2188-2-0x0000000000210000-0x0000000000220000-memory.dmp

Filesize
64KB

Download
memory/2188-3-0x0000000000220000-0x0000000000230000-memory.dmp

Filesize
64KB

Download
memory/2188-4-0x0000000000210000-0x0000000000220000-memory.dmp

Filesize
64KB

Download
memory/2188-5-0x0000000000210000-0x0000000000220000-memory.dmp

Filesize
64KB

Download
memory/2188-7-0x0000000000220000-0x0000000000230000-memory.dmp

Filesize
64KB

Download
memory/2188-6-0x0000000000210000-0x0000000000220000-memory.dmp

Filesize
64KB

Download