5ac959e5dee9884512f4a34623bbad2c08be427669015b917a750f7cbfbb0a75

Analysis

max time kernel
147s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
15/04/2024, 16:14

Target

Plugins/UsageMonitor.dll
Size

26KB
MD5

6d5a929df5550b56727a7cf2464a76e7
SHA1

f4cd425a0fb71db146c243093f4504cbe0dc68a7
SHA256

52ce9296b863c5f900140562989443f9b97ab77236168f4be504fa2de2992145
SHA512

85ea7b9b04c07578811b407ba34e28b9927130004106b03110286415318964ba97760106144537fa63946e37838093a4f4436c421697f0151cdd9bbc4bbc3ba0
SSDEEP

384:rVy/J2YCcfHLGyRZU5cFbdHn1xvvdZKl/hw+9XXy2anHoeSKAamMBeJD77:5y/9CILGyjUOFbtFZKDw+9yXI/UBeVv

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1940	3840	WerFault.exe	85

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3256 wrote to memory of 3840	3256	rundll32.exe	85
PID 3256 wrote to memory of 3840	3256	rundll32.exe	85
PID 3256 wrote to memory of 3840	3256	rundll32.exe	85

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Plugins\UsageMonitor.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3256
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\Plugins\UsageMonitor.dll,#1
  2⤵
  PID:3840
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 3840 -s 984
    3⤵
    - Program crash
    PID:1940

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3840 -ip 3840
1⤵
PID:4052

memory/3840-0-0x0000000000930000-0x0000000000940000-memory.dmp

Filesize
64KB

Download
memory/3840-1-0x0000000000980000-0x000000000098E000-memory.dmp

Filesize
56KB

Download
memory/3840-2-0x0000000074EB0000-0x0000000074EBE000-memory.dmp

Filesize
56KB

Download
memory/3840-3-0x0000000074570000-0x0000000074D20000-memory.dmp

Filesize
7.7MB

Download
memory/3840-4-0x0000000074570000-0x0000000074D20000-memory.dmp

Filesize
7.7MB

Download