3a741b76aa6b71aed94b35efafcf0eee83f00cc0936e5f79dea29311c3ad8fdc

Analysis

max time kernel
119s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
17/04/2024, 20:39

Target

3a741b76aa6b71aed94b35efafcf0eee83f00cc0936e5f79dea29311c3ad8fdc.dll
Size

5KB
MD5

f6a1ab5ac108d15d877cde7ea224073d
SHA1

b05eda88e1d0b859830cd2873812891cf814b8c7
SHA256

3a741b76aa6b71aed94b35efafcf0eee83f00cc0936e5f79dea29311c3ad8fdc
SHA512

d13501ec3b143146953fa67aac3e36ef3284aa2c5fbab83c4063354a52d89ba675629122d34e5509769fc407eb842755aabb3056bca7ec0ffb2089a8de74659d
SSDEEP

48:CCy86+Wet9Q/iooHeiefhe+/lSMYEqvXql+shAC/Ox35RdsB+ya+1tK2nEuysMcQ:hy859x0P8MayqJ+zMcjGUFm

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2928 wrote to memory of 2992	2928	rundll32.exe	28
PID 2928 wrote to memory of 2992	2928	rundll32.exe	28
PID 2928 wrote to memory of 2992	2928	rundll32.exe	28
PID 2928 wrote to memory of 2992	2928	rundll32.exe	28
PID 2928 wrote to memory of 2992	2928	rundll32.exe	28
PID 2928 wrote to memory of 2992	2928	rundll32.exe	28
PID 2928 wrote to memory of 2992	2928	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\3a741b76aa6b71aed94b35efafcf0eee83f00cc0936e5f79dea29311c3ad8fdc.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2928
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\3a741b76aa6b71aed94b35efafcf0eee83f00cc0936e5f79dea29311c3ad8fdc.dll,#1
  2⤵
  PID:2992