6304de5379885b2af955bba4ec97942f1642bdfe6e9717c8f0dfc8b92cad2a3f

Analysis

max time kernel
146s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
04-04-2024 21:24

Target

6304de5379885b2af955bba4ec97942f1642bdfe6e9717c8f0dfc8b92cad2a3f.dll
Size

6KB
MD5

d68f4ad9c9a6f492a890495887920b99
SHA1

b3edab8aece0c35785d1dfe1fb4a993223b4d93d
SHA256

6304de5379885b2af955bba4ec97942f1642bdfe6e9717c8f0dfc8b92cad2a3f
SHA512

9f245f6d7b10811a2888db329d112ea0f53094c856a69179bd5189477f0ea20729de32e7910570d9b34722d139138ba5ec3bbcfdfcb618a3f280900a092454f4
SSDEEP

48:63mll5YVOa9VUX1iwbQWu0ClZB+BDq9J5SH:VDa9VUX9bQWilZB+FqX5SH

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 656 wrote to memory of 2372	656	rundll32.exe	85
PID 656 wrote to memory of 2372	656	rundll32.exe	85
PID 656 wrote to memory of 2372	656	rundll32.exe	85

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6304de5379885b2af955bba4ec97942f1642bdfe6e9717c8f0dfc8b92cad2a3f.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:656
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6304de5379885b2af955bba4ec97942f1642bdfe6e9717c8f0dfc8b92cad2a3f.dll,#1
  2⤵
  PID:2372