183bf0c87ecb3514ad2331e93aaee11f3887365017be38d4fde4c86ffeea04a4

Analysis

max time kernel
149s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
07/03/2024, 18:34

Target

b963dc3fceb02ea8303833795c56001e.dll
Size

80KB
MD5

b963dc3fceb02ea8303833795c56001e
SHA1

437a6cb9d12fb355189ef2be31835349ea185255
SHA256

183bf0c87ecb3514ad2331e93aaee11f3887365017be38d4fde4c86ffeea04a4
SHA512

720ed7d112084672f12bba40a90c91756875dbeab54f255202225b013330f82583a28429f28362523f2e9ced32e9beb483006072caa8dd410a190a7ca361a4d2
SSDEEP

1536:mX1jbjjeYSsgJfQ3eMwWCJ5ZO6x0NnoGJA22P2v48s6rZE398T+l1ofuot:abjjnAJDMwWCJ+6x0NnzA21frZrT+l1S

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1308 wrote to memory of 1236	1308	rundll32.exe	88
PID 1308 wrote to memory of 1236	1308	rundll32.exe	88
PID 1308 wrote to memory of 1236	1308	rundll32.exe	88

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\b963dc3fceb02ea8303833795c56001e.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1308
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\b963dc3fceb02ea8303833795c56001e.dll,#1
  2⤵
  PID:1236