Analysis
-
max time kernel
78s -
max time network
99s -
platform
windows11-21h2_x64 -
resource
win11-20240221-en -
resource tags
-
submitted
20-03-2024 23:27
General
-
Target
Microsoft.Win32.Primitives.dll
-
Size
7KB
-
MD5
8607bdfc638e4fa1d8e716486a9c6475
-
SHA1
9e246a9f462097de2b3b2472950eb6273e874efc
-
SHA256
85c9a4fac07761d259bd91c669e4e1c10cf79d0939e64ee96e32abdcce51c86c
-
SHA512
91314554e0937194f74c802c695090582e9a6b857da72026ccf5432f5ad960547b4f4e2235f0a56108a63cbb40d60fb7d7bbb30b39f1851606a09bcf34371c5a
-
SSDEEP
96:/0TYpaXzERVpxxeDZeoIqA4NVPiDKWUOLfW+qxv87xbO+XDS8PODxVWhPIeWE:8spQgrpnkeQwRUOKlxEdr50WhPIeW
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Microsoft.Win32.Primitives.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Microsoft.Win32.Primitives.dll,#12⤵