081b2455cbf464eee43082d023137137eaf43b7a6e1f475feeb75b7cdaaa4cac

Analysis

max time kernel
92s
max time network
114s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
17/04/2024, 01:02

Target

Sora - OpenAi v1.1/__MACOSX/libeay32.dll
Size

1.2MB
MD5

d02143376cdea15b313a398a4caf3735
SHA1

6ed82e6c999974154cccd1b0809e518bf234eafb
SHA256

fe5ceefedcec83d40bd63a7cc2d4ae4012b3f59f1098638056fdc1a477d405f7
SHA512

d9e9e547e21bf3ad0f4474e0d05132c36d4865b8e796dfce888b9f81f5332e3dfe9126988dce938564f1030d069f30d4b912285205f77977c1b4bfee68707624
SSDEEP

24576:x1EIUsgnWi+3YhVl/lISyzMwIxboqM//+CsUwGBUgPrNg3tPP7NrhPMLwX/:1gnHc/MwI9oLjVjNktPP7NrhMLwX/

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 692 wrote to memory of 5168	692	rundll32.exe	83
PID 692 wrote to memory of 5168	692	rundll32.exe	83
PID 692 wrote to memory of 5168	692	rundll32.exe	83

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Sora - OpenAi v1.1\__MACOSX\libeay32.dll",#1
1⤵
- Suspicious use of WriteProcessMemory
PID:692
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Sora - OpenAi v1.1\__MACOSX\libeay32.dll",#1
  2⤵
  PID:5168