92491497b83a8ad213c15c3f43fc34358a6d7e5ccf3cfbc7e93bb3f436a96456

Analysis

max time kernel
119s
max time network
136s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
10-04-2024 12:41

Target

92491497b83a8ad213c15c3f43fc34358a6d7e5ccf3cfbc7e93bb3f436a96456.dll
Size

1.2MB
MD5

6d8e4acec4286583af81f12d882e03a2
SHA1

7b3c87cc452b2692c61ee693e692326456c2915a
SHA256

92491497b83a8ad213c15c3f43fc34358a6d7e5ccf3cfbc7e93bb3f436a96456
SHA512

8bb411ee19041c3e9724cfaa9440d77574eec6b2c1a3ed7ac4aa181b2b612496e69eefe7f8b336010de292e1ebc95cfbaecf14c82feaf686b15de352b36c36e4
SSDEEP

24576:NGBxu8r0M1PL+6QYrZUlthutiI1psVbwWDRZvMAY1/31eayBWdRH6ypY1P0vhB:gBxvIMtL+IezusCc8AY1/wXo6aYp0v

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2600 wrote to memory of 2648	2600	rundll32.exe	28
PID 2600 wrote to memory of 2648	2600	rundll32.exe	28
PID 2600 wrote to memory of 2648	2600	rundll32.exe	28
PID 2600 wrote to memory of 2648	2600	rundll32.exe	28
PID 2600 wrote to memory of 2648	2600	rundll32.exe	28
PID 2600 wrote to memory of 2648	2600	rundll32.exe	28
PID 2600 wrote to memory of 2648	2600	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\92491497b83a8ad213c15c3f43fc34358a6d7e5ccf3cfbc7e93bb3f436a96456.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2600
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\92491497b83a8ad213c15c3f43fc34358a6d7e5ccf3cfbc7e93bb3f436a96456.dll,#1
  2⤵
  PID:2648

memory/2648-0-0x0000000010000000-0x0000000010137000-memory.dmp

Filesize
1.2MB

Download
memory/2648-2-0x0000000010000000-0x00000000100B7000-memory.dmp

Filesize
732KB

Download
memory/2648-1-0x00000000004B0000-0x00000000005CA000-memory.dmp

Filesize
1.1MB

Download
memory/2648-3-0x00000000002D0000-0x0000000000380000-memory.dmp

Filesize
704KB

Download
memory/2648-4-0x00000000004B0000-0x000000000054C000-memory.dmp

Filesize
624KB

Download
memory/2648-5-0x00000000004B0000-0x000000000054C000-memory.dmp

Filesize
624KB

Download
memory/2648-7-0x00000000004B0000-0x000000000054C000-memory.dmp

Filesize
624KB

Download
memory/2648-8-0x00000000004B0000-0x000000000054C000-memory.dmp

Filesize
624KB

Download
memory/2648-9-0x0000000010000000-0x00000000100B7000-memory.dmp

Filesize
732KB

Download