b9bba8e0cebbeb9bae9a5be93e60d939fb41c3d26d9d999fe84f0233a8d2bcee

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
11/03/2024, 00:10

Target

b9bba8e0cebbeb9bae9a5be93e60d939fb41c3d26d9d999fe84f0233a8d2bcee.dll
Size

342KB
MD5

f15d7081e573f6fd9892d12d87a1e3b2
SHA1

45323123ca2083c71ebab511fe2d361eca0e6b96
SHA256

b9bba8e0cebbeb9bae9a5be93e60d939fb41c3d26d9d999fe84f0233a8d2bcee
SHA512

0173e7f2ed0c0cd2a2ac7781a73bdb56602a6c62bc9afb9e61ef5ac65c99989767df546802b40a8e0a23c65e825d41d3a644ec5868d56d6385d7939e8655077f
SSDEEP

6144:IRoOpXN8bEvZehNyi5qlscXsKCkSLjn7WQDilmvWpJJvEiZ:IRoOpXCjNwlscXeJikilmvYEiZ

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 1152 wrote to memory of 2800	1152	rundll32.exe	28
PID 1152 wrote to memory of 2800	1152	rundll32.exe	28
PID 1152 wrote to memory of 2800	1152	rundll32.exe	28
PID 1152 wrote to memory of 2800	1152	rundll32.exe	28
PID 1152 wrote to memory of 2800	1152	rundll32.exe	28
PID 1152 wrote to memory of 2800	1152	rundll32.exe	28
PID 1152 wrote to memory of 2800	1152	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\b9bba8e0cebbeb9bae9a5be93e60d939fb41c3d26d9d999fe84f0233a8d2bcee.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1152
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\b9bba8e0cebbeb9bae9a5be93e60d939fb41c3d26d9d999fe84f0233a8d2bcee.dll,#1
  2⤵
  PID:2800