5bed6a23ccefe65a6a5738be6c1032f5325302c4a615307c1bae741eb813dad1

Analysis

max time kernel
149s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
06/03/2024, 13:37

Target

SecuriteInfo.com.Variant.Doina.67409.27979.dll
Size

614KB
MD5

01eeec277c8c1d6c99828aa4c98ab12c
SHA1

111bff4ec2efb1783f3d81494e66d17f725ea4f1
SHA256

5bed6a23ccefe65a6a5738be6c1032f5325302c4a615307c1bae741eb813dad1
SHA512

ec6c246290110db5b59cf9d1f954ee20e17a03224240ca8c82ac245329104e0b33475185c80c7576a4131506b8a53891fcb209d4332404d8d20a1befef9829d7
SSDEEP

12288:BOXTGVgMfb96X8gPRUWDqMqByjSB3a0Vt7Pgw:BQCZfJ6XFk9S2zPgw

Score

1^/10

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 2376 wrote to memory of 4660	2376	rundll32.exe	87
PID 2376 wrote to memory of 4660	2376	rundll32.exe	87

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Variant.Doina.67409.27979.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2376
- C:\Windows\system32\rundll32.exe
  rundll32 ccupdate.log, #45
  2⤵
  PID:4660