e0b7e6e6ab305fc27a4ad3b64c67187c69df7adad99311f249c73c3349cf92c5

Analysis

max time kernel
119s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
10-04-2024 03:36

Target

e0b7e6e6ab305fc27a4ad3b64c67187c69df7adad99311f249c73c3349cf92c5.dll
Size

1.7MB
MD5

bd3ba7c4d050f0d9df3406b494c9b2f7
SHA1

3ec2185e1432be59d91d851942401d64f7aeb7b8
SHA256

e0b7e6e6ab305fc27a4ad3b64c67187c69df7adad99311f249c73c3349cf92c5
SHA512

d84f34baa8178a2269eb7a104e43eeb8e63ecd7e3c54b795d538e128bc9a1c847cc94ae2675c5a3d5b78d1a242d6721a307570903068c95e43fab6d363c23c84
SSDEEP

49152:qSRWYL/eXV1i/kmeE91qj4iZ6YaycLzTF:xRWYL/eXV1i/kmeM1qj4iwiAp

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1692	612	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2196 wrote to memory of 612	2196	rundll32.exe	28
PID 2196 wrote to memory of 612	2196	rundll32.exe	28
PID 2196 wrote to memory of 612	2196	rundll32.exe	28
PID 2196 wrote to memory of 612	2196	rundll32.exe	28
PID 2196 wrote to memory of 612	2196	rundll32.exe	28
PID 2196 wrote to memory of 612	2196	rundll32.exe	28
PID 2196 wrote to memory of 612	2196	rundll32.exe	28
PID 612 wrote to memory of 1692	612	rundll32.exe	29
PID 612 wrote to memory of 1692	612	rundll32.exe	29
PID 612 wrote to memory of 1692	612	rundll32.exe	29
PID 612 wrote to memory of 1692	612	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\e0b7e6e6ab305fc27a4ad3b64c67187c69df7adad99311f249c73c3349cf92c5.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2196
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\e0b7e6e6ab305fc27a4ad3b64c67187c69df7adad99311f249c73c3349cf92c5.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:612
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 612 -s 220
    3⤵
    - Program crash
    PID:1692