5f0eb604489fccc60a72467d3dc77a2d8bf20af82935d425f2a470fd6cb7f014

Analysis

max time kernel
147s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
06/04/2024, 21:32

Target
IETabHelper.dll
Size 34KB
Sample240406-1d2rtabe7y
SHA256 7873b2030ffbca9c48ecbf6c573b4269f33a6a0226cfbad09e520000ed6a7956
MD5 86ca2be124b855b48001321ec396c73b
SHA1 462dad233a23b67e1260b9f28155fd93b54a036d
SHA512 18262a161287b46915c1c40afbb9b4c763a342234a29e41743965537ae9beaf17d4175c7b9168c4ddf46ac4e14dcc5e4ee6894d21fe3c3c2602e32c3c739ee9a
SSDEEP 192:xg0uTOXGvjODYzYitAM8A5rKTRnTun8o8vAw0Fcou7+wse+PjPgROv:YT3vjODMrxB5renan8OdfuSPL5
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
224	rundll32.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 228 wrote to memory of 224	228	rundll32.exe	85
PID 228 wrote to memory of 224	228	rundll32.exe	85
PID 228 wrote to memory of 224	228	rundll32.exe	85

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\IETabHelper.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:228
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\IETabHelper.dll,#1
  2⤵
  - Suspicious use of SetWindowsHookEx
  PID:224