942b6b135f4f4d23a4b52e7c7a4e9f91808a3ff607e49e3ea349bb784d155375

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
15/03/2024, 03:30

Target

ca5edc4420a02fc0b69c4beeb0ebc761.dll
Size

11KB
MD5

ca5edc4420a02fc0b69c4beeb0ebc761
SHA1

3a81961e8e2d2fe7cf1d8812a2e792b2e91ed0fa
SHA256

942b6b135f4f4d23a4b52e7c7a4e9f91808a3ff607e49e3ea349bb784d155375
SHA512

50f5567c0424e4627fa85836c8b86c3f33cf66ba3a068b2e0a39c9fee0673a3cb1a05783602e97bd15aa2b60c5c80ba587c4600ad71085752c0a1dde1a7214e5
SSDEEP

192:ax/xvECpOArhUgooqHEm4EkajcsWq+XTe0p/cpyPToMD6snsAe4yAjkgUw9h:abvtYAVUu4J4EL4sWHa0tcbMD3sAe4yq

Score

1^/10

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
464	Process not Found

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2256	rundll32.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2256	rundll32.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2728 wrote to memory of 2256	2728	rundll32.exe	28
PID 2728 wrote to memory of 2256	2728	rundll32.exe	28
PID 2728 wrote to memory of 2256	2728	rundll32.exe	28
PID 2728 wrote to memory of 2256	2728	rundll32.exe	28
PID 2728 wrote to memory of 2256	2728	rundll32.exe	28
PID 2728 wrote to memory of 2256	2728	rundll32.exe	28
PID 2728 wrote to memory of 2256	2728	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\ca5edc4420a02fc0b69c4beeb0ebc761.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2728
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\ca5edc4420a02fc0b69c4beeb0ebc761.dll,#1
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  PID:2256

memory/2256-1-0x0000000010000000-0x0000000010015000-memory.dmp

Filesize
84KB

Download
memory/2256-0-0x0000000010000000-0x0000000010015000-memory.dmp

Filesize
84KB

Download