558773cb6a167d5ab17f37b30b80afa7b9c2c3aef5cd17d56fd57c952954cb3f

Analysis

max time kernel
120s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
18-04-2024 22:00

Target

558773cb6a167d5ab17f37b30b80afa7b9c2c3aef5cd17d56fd57c952954cb3f.dll
Size

6KB
MD5

9a810e178c086d39716dc5808c9653df
SHA1

c62db970d00da558aa55c47f32e94bd07718b547
SHA256

558773cb6a167d5ab17f37b30b80afa7b9c2c3aef5cd17d56fd57c952954cb3f
SHA512

df26280a64e22acd7373a470d67c4d2b78d6cadc1877f8ffada0030e8302a54f589057abde4170d101d51eb908a8ce7e5020cab864ce9d7d145bec9a6a756665
SSDEEP

48:63mll5YVOa9VUX1iwbQWu0yB+BDq9J5SH:VDa9VUX9bQWSB+FqX5SH

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2188 wrote to memory of 2376	2188	rundll32.exe	28
PID 2188 wrote to memory of 2376	2188	rundll32.exe	28
PID 2188 wrote to memory of 2376	2188	rundll32.exe	28
PID 2188 wrote to memory of 2376	2188	rundll32.exe	28
PID 2188 wrote to memory of 2376	2188	rundll32.exe	28
PID 2188 wrote to memory of 2376	2188	rundll32.exe	28
PID 2188 wrote to memory of 2376	2188	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\558773cb6a167d5ab17f37b30b80afa7b9c2c3aef5cd17d56fd57c952954cb3f.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2188
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\558773cb6a167d5ab17f37b30b80afa7b9c2c3aef5cd17d56fd57c952954cb3f.dll,#1
  2⤵
  PID:2376