b9e76a4278c5833422fe4b29d75bcd5856863b2fdea180f65250fa260b200bb7

Analysis

max time kernel
119s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
10/04/2024, 13:49

Target

b9e76a4278c5833422fe4b29d75bcd5856863b2fdea180f65250fa260b200bb7.dll
Size

107KB
MD5

304ccd99a0b27ec17c9dfe4015bace44
SHA1

ed315687ab27b915b81e0eee5a917079f0fa0d56
SHA256

b9e76a4278c5833422fe4b29d75bcd5856863b2fdea180f65250fa260b200bb7
SHA512

e1b9b918fbb01a22d701c27bae9bc93eef82f3b4f9832174df95bc1f3f4771445db60ffa85894e2361616a25603f0448f4b01ce7070c129a23e1f79179188813
SSDEEP

1536:U/kDtfd+YbVzkHPjx+IWG4D1lAe0UsKyqkFzG5jsqAduFnToIfGrS+Ixsk:+/YbVzyPE4SSqjsqAdutTBfGrS+esk

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2016	2224	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2220 wrote to memory of 2224	2220	rundll32.exe	28
PID 2220 wrote to memory of 2224	2220	rundll32.exe	28
PID 2220 wrote to memory of 2224	2220	rundll32.exe	28
PID 2220 wrote to memory of 2224	2220	rundll32.exe	28
PID 2220 wrote to memory of 2224	2220	rundll32.exe	28
PID 2220 wrote to memory of 2224	2220	rundll32.exe	28
PID 2220 wrote to memory of 2224	2220	rundll32.exe	28
PID 2224 wrote to memory of 2016	2224	rundll32.exe	29
PID 2224 wrote to memory of 2016	2224	rundll32.exe	29
PID 2224 wrote to memory of 2016	2224	rundll32.exe	29
PID 2224 wrote to memory of 2016	2224	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\b9e76a4278c5833422fe4b29d75bcd5856863b2fdea180f65250fa260b200bb7.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2220
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\b9e76a4278c5833422fe4b29d75bcd5856863b2fdea180f65250fa260b200bb7.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2224
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2224 -s 228
    3⤵
    - Program crash
    PID:2016