1dfee5c5563ee1be0ae8e062b2aeeddf7691edaea82d0249f0a36ab67be6fb29

Analysis

max time kernel
150s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
29/03/2024, 18:43

Target

1dfee5c5563ee1be0ae8e062b2aeeddf7691edaea82d0249f0a36ab67be6fb29.dll
Size

2.9MB
MD5

90aebef76771b6d7f216b6a0f82af3bc
SHA1

1b3548d8574b3b902b9cad648b75efc8780857b8
SHA256

1dfee5c5563ee1be0ae8e062b2aeeddf7691edaea82d0249f0a36ab67be6fb29
SHA512

5600e0ad6342a60c55499c40e45d310ef1e3ff18d8adcc9cb1abc075a0cba142a3356d224a6e30f5dd4b4a5e3b7b1efbdfe6dabae35dfad8022563cf652ff031
SSDEEP

49152:jmekDCfuXW/fMFYxZ6ADtTq8Nni5QiMDJkY/dCHBa+VyMXbMIwDt8P:ieOm3MFMdmWnirMaYz+zLMIwm

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4708 wrote to memory of 2760	4708	rundll32.exe	90
PID 4708 wrote to memory of 2760	4708	rundll32.exe	90
PID 4708 wrote to memory of 2760	4708	rundll32.exe	90

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1dfee5c5563ee1be0ae8e062b2aeeddf7691edaea82d0249f0a36ab67be6fb29.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4708
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1dfee5c5563ee1be0ae8e062b2aeeddf7691edaea82d0249f0a36ab67be6fb29.dll,#1
  2⤵
  PID:2760

memory/2760-1-0x0000000010000000-0x00000000102DD000-memory.dmp

Filesize
2.9MB

Download
memory/2760-0-0x0000000000780000-0x0000000000786000-memory.dmp

Filesize
24KB

Download
memory/2760-3-0x0000000002570000-0x0000000002694000-memory.dmp

Filesize
1.1MB

Download
memory/2760-4-0x00000000026A0000-0x00000000027AA000-memory.dmp

Filesize
1.0MB

Download
memory/2760-7-0x00000000026A0000-0x00000000027AA000-memory.dmp

Filesize
1.0MB

Download
memory/2760-8-0x0000000010000000-0x00000000102DD000-memory.dmp

Filesize
2.9MB

Download
memory/2760-11-0x00000000026A0000-0x00000000027AA000-memory.dmp

Filesize
1.0MB

Download
memory/2760-12-0x00000000027B0000-0x000000000487A000-memory.dmp

Filesize
32.8MB

Download
memory/2760-13-0x0000000004880000-0x0000000004976000-memory.dmp

Filesize
984KB

Download
memory/2760-14-0x0000000004980000-0x0000000004A74000-memory.dmp

Filesize
976KB

Download
memory/2760-15-0x0000000004980000-0x0000000004A74000-memory.dmp

Filesize
976KB

Download
memory/2760-17-0x0000000004980000-0x0000000004A74000-memory.dmp

Filesize
976KB

Download
memory/2760-18-0x0000000000390000-0x00000000003A2000-memory.dmp

Filesize
72KB

Download
memory/2760-19-0x0000000068E40000-0x0000000068E90000-memory.dmp

Filesize
320KB

Download