242e31d4fafdb60abd704e9e642ea1464b87b276923d51ad52807dbfb48cf9f1

Analysis

max time kernel
146s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
17-04-2024 19:34

Target

242e31d4fafdb60abd704e9e642ea1464b87b276923d51ad52807dbfb48cf9f1.dll
Size

6KB
MD5

1eda9a88145ed12282cf817b1a721376
SHA1

f5b39a267b7e417b9e547ccce51285dd577d3972
SHA256

242e31d4fafdb60abd704e9e642ea1464b87b276923d51ad52807dbfb48cf9f1
SHA512

7fbce0e21925b1d68c404644d6f29f5699c69be8e9eca4bca4a9ee5b48129db9312c075d759a77d3c514e66c6767295ca9d7eb1b664fe195166a22ae9351de30
SSDEEP

192:F5oLwKQ8yJ3EDhAXA0D4oPIsa+aw58d0WDGIpSeyseMSBFw2vOPjRPgw8:F5mwKQdEeKoQsT59WbpSeBeNQUOLRPr8

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1764 wrote to memory of 4276	1764	rundll32.exe	84
PID 1764 wrote to memory of 4276	1764	rundll32.exe	84
PID 1764 wrote to memory of 4276	1764	rundll32.exe	84

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\242e31d4fafdb60abd704e9e642ea1464b87b276923d51ad52807dbfb48cf9f1.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1764
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\242e31d4fafdb60abd704e9e642ea1464b87b276923d51ad52807dbfb48cf9f1.dll,#1
  2⤵
  PID:4276