93a223f67ba729705d01ac05eb994be3e7fbe061e6e40909996964be1d0cb944

Analysis

max time kernel
121s
max time network
136s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
15/03/2024, 23:58

Target

cc9546d55cf2e8381906d81570aafaa9.dll
Size

30KB
MD5

cc9546d55cf2e8381906d81570aafaa9
SHA1

d88cfbecbef7f7043afde5ee6e42169eb8871bd4
SHA256

93a223f67ba729705d01ac05eb994be3e7fbe061e6e40909996964be1d0cb944
SHA512

660e66e0c9daef96a65b088b5afc118fe4ee8dadd9a5b669f7fbe59c4899105b1a47bd95fd72159b4edc4b590a3ad3bd294d94399b4aa5b9eed39f3e9422522a
SSDEEP

384:JG257CHrq/6vgvJYuBhrNz3q0F15WuQicqDTzpDKaJcULHbqqOsRumSfhVsXmze9:J4u/TvJYuLNHIkNLb5LepVymzel07eU

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2688 wrote to memory of 2260	2688	rundll32.exe	27
PID 2688 wrote to memory of 2260	2688	rundll32.exe	27
PID 2688 wrote to memory of 2260	2688	rundll32.exe	27
PID 2688 wrote to memory of 2260	2688	rundll32.exe	27
PID 2688 wrote to memory of 2260	2688	rundll32.exe	27
PID 2688 wrote to memory of 2260	2688	rundll32.exe	27
PID 2688 wrote to memory of 2260	2688	rundll32.exe	27

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\cc9546d55cf2e8381906d81570aafaa9.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2688
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\cc9546d55cf2e8381906d81570aafaa9.dll,#1
  2⤵
  PID:2260

memory/2260-0-0x0000000000160000-0x0000000000174000-memory.dmp

Filesize
80KB

Download
memory/2260-1-0x0000000000160000-0x0000000000174000-memory.dmp

Filesize
80KB

Download
memory/2260-2-0x0000000000160000-0x0000000000174000-memory.dmp

Filesize
80KB

Download
memory/2260-3-0x0000000000160000-0x0000000000165000-memory.dmp

Filesize
20KB

Download
memory/2260-4-0x0000000075BC0000-0x0000000075C07000-memory.dmp

Filesize
284KB

Download
memory/2260-5-0x0000000000160000-0x0000000000166000-memory.dmp

Filesize
24KB

Download
memory/2260-6-0x0000000075BC0000-0x0000000075C07000-memory.dmp

Filesize
284KB

Download