be7f9c6015c1bfff3173610ee1585d7d30df70c84c951b1ea429d7c004cad243

Analysis

max time kernel
117s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
06/04/2024, 11:45

Target

BleachBit-Portable/_sqlite3.dll
Size

24KB
MD5

338493707b6442fa36f8cf17c63d925e
SHA1

3531aba5a5f0bb46e8872f09f64babb533c0b97d
SHA256

418b9d8509c657ba7c3add83bd3231c1bce8eda59784568e9572bc522609e62e
SHA512

2b289e571c16ef66cf28bb2f96d41cd4b78aa92891589bb3da3b05c40fe6f24fe54e216ffa7e479f72caf64ef86be43e91841a70368aa4b6bf4936a1a459839c
SSDEEP

384:HthVjt2U5gfK1puOtIInRbgX/GTCDGGGRO/dXsTxq1nVRfxsvW7BayTXJyzS:HtLB5g8p5i+6GGGIdXsTxIxYWayTX

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral7/memory/2204-1-0x000000001E180000-0x000000001E195000-memory.dmp	upx

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2232 wrote to memory of 2204	2232	rundll32.exe	28
PID 2232 wrote to memory of 2204	2232	rundll32.exe	28
PID 2232 wrote to memory of 2204	2232	rundll32.exe	28
PID 2232 wrote to memory of 2204	2232	rundll32.exe	28
PID 2232 wrote to memory of 2204	2232	rundll32.exe	28
PID 2232 wrote to memory of 2204	2232	rundll32.exe	28
PID 2232 wrote to memory of 2204	2232	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\BleachBit-Portable\_sqlite3.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2232
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\BleachBit-Portable\_sqlite3.dll,#1
  2⤵
  PID:2204

memory/2204-0-0x000000001E180000-0x000000001E195000-memory.dmp

Filesize
84KB

Download
memory/2204-2-0x000000001E180000-0x000000001E195000-memory.dmp

Filesize
84KB

Download
memory/2204-1-0x000000001E180000-0x000000001E195000-memory.dmp

Filesize
84KB

Download
memory/2204-3-0x000000001E180000-0x000000001E195000-memory.dmp

Filesize
84KB

Download