b5f62b5c5fc6b14c1817aadd8b19027e763c00ecaf68934cef13c3b55a3c7290

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
02-04-2024 10:32

Target

238dcc5611ed9066b63d2d0109c9b623f54f8d7b61d5f9de59694cfc60a4e646.dll
Size

840KB
MD5

4b1518535af6344af39bd90aa02a6c0d
SHA1

183b74ec94b19c1f4af194e4d606270053669913
SHA256

238dcc5611ed9066b63d2d0109c9b623f54f8d7b61d5f9de59694cfc60a4e646
SHA512

8644ec984504f56336fe583c61f4e86c103550eb9f8cf27c6342251da13ef2d0dff132bd2256fbe8e1958da788e0f9738636e9b1438851784934427ec7006cb0
SSDEEP

24576:je9nfmpSVmL+Cf72yb1SFEtEfPmY4uRD7HpUMhOw8ghE:qBmpSVmLfCDfPJ4cDFPhmghE

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

rundll32.exe

pid process

1692 rundll32.exe

pid	process
1692	rundll32.exe

Suspicious use of WriteProcessMemory 7 IoCs

Processes:

rundll32.exe

description	pid	process	target process
PID 1220 wrote to memory of 1692	1220	rundll32.exe	rundll32.exe
PID 1220 wrote to memory of 1692	1220	rundll32.exe	rundll32.exe
PID 1220 wrote to memory of 1692	1220	rundll32.exe	rundll32.exe
PID 1220 wrote to memory of 1692	1220	rundll32.exe	rundll32.exe
PID 1220 wrote to memory of 1692	1220	rundll32.exe	rundll32.exe
PID 1220 wrote to memory of 1692	1220	rundll32.exe	rundll32.exe
PID 1220 wrote to memory of 1692	1220	rundll32.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\238dcc5611ed9066b63d2d0109c9b623f54f8d7b61d5f9de59694cfc60a4e646.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1220

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\238dcc5611ed9066b63d2d0109c9b623f54f8d7b61d5f9de59694cfc60a4e646.dll,#1
2⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:1692

memory/1692-0-0x00000000001E0000-0x0000000000216000-memory.dmp

Filesize
216KB

Download
memory/1692-1-0x00000000001E0000-0x0000000000216000-memory.dmp

Filesize
216KB

Download