56b20e4e0397dd0b577d1868e2b8f579c6c1137a86d37b3d2893dd00b05030e8

Analysis

max time kernel
150s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
19-03-2024 10:19

Target

d5dd9fc9d72e56a70bdd44d66c2bff5e.dll
Size

25KB
MD5

d5dd9fc9d72e56a70bdd44d66c2bff5e
SHA1

78475535296ae71a65720ccdeef472dd2e1fb3d7
SHA256

56b20e4e0397dd0b577d1868e2b8f579c6c1137a86d37b3d2893dd00b05030e8
SHA512

7e07905b34eff5d7d87bff9754aa1dd6a01b069433fa25a3ab59a2352a52c9461e18882386ed2dc6449d312688e89e15f373279f1f29619e0f87ae9b13673681
SSDEEP

384:D+GhNz35E7duta+fGGq77nRrFglQWY6awzjRcfE:D+Gfz3u7duta+Rq7lrFGQZ6hzjReE

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2212 wrote to memory of 2300	2212	rundll32.exe	84
PID 2212 wrote to memory of 2300	2212	rundll32.exe	84
PID 2212 wrote to memory of 2300	2212	rundll32.exe	84

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\d5dd9fc9d72e56a70bdd44d66c2bff5e.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2212
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\d5dd9fc9d72e56a70bdd44d66c2bff5e.dll,#1
  2⤵
  PID:2300