bdfd5a121e428be97f2d0b901f89320547a07a451edddeddbe457e8ce3664343

Analysis

max time kernel
122s
max time network
141s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
18-04-2024 02:01

Target

bdfd5a121e428be97f2d0b901f89320547a07a451edddeddbe457e8ce3664343.dll
Size

5KB
MD5

3faec615f2e7c7d9119f8c1fa723d82d
SHA1

44eedb8e6ccd55fa958808aad6e9c53ba88aad6a
SHA256

bdfd5a121e428be97f2d0b901f89320547a07a451edddeddbe457e8ce3664343
SHA512

e8ff22133e195211d1ac744c44dc8a7dd50b8e46caa87a66fc3abb56f1c75ee71239984458b626c92cfaa297f1bfc46b0f217e01e6d0cd628e2fd8006921d16b
SSDEEP

96:nEY2RrF1eqwi4USg+QCcbr4dyNNQfSpivD+3detz9u9E0:EHRh1epp/pQdrdNN/piyEg9H

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2444 wrote to memory of 2652	2444	rundll32.exe	28
PID 2444 wrote to memory of 2652	2444	rundll32.exe	28
PID 2444 wrote to memory of 2652	2444	rundll32.exe	28
PID 2444 wrote to memory of 2652	2444	rundll32.exe	28
PID 2444 wrote to memory of 2652	2444	rundll32.exe	28
PID 2444 wrote to memory of 2652	2444	rundll32.exe	28
PID 2444 wrote to memory of 2652	2444	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\bdfd5a121e428be97f2d0b901f89320547a07a451edddeddbe457e8ce3664343.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2444
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\bdfd5a121e428be97f2d0b901f89320547a07a451edddeddbe457e8ce3664343.dll,#1
  2⤵
  PID:2652