3413c79e267f2906768a05abceb441e0503d346134b8731a086df0db1be84d90

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
20-04-2024 01:11

Target

NOTIFICACION_JUDICIAL/NOTIFICACION DEMANDA/intl.dll
Size

87KB
MD5

d1a21e38593fddba8e51ed6bf7acf404
SHA1

759f16325f0920933ac977909b7fe261e0e129e6
SHA256

6a64c9cb0904ed48ce0d5cda137fcfd6dd463d84681436ca647b195aa2038a7e
SHA512

3f4390603cd68d949eb938c1599503fb1cbb1b8250638e0985fad2f40f08d5e45ea4a8c149e44a50c6aa9077054387c48f71b53bf06b713ca1e73a3d5a6a6c2e
SSDEEP

1536:R3P7SvYgvNf+ZSz6wHFK1XErzMfb2z/oMJtEZMGG3:RjGYgvNf+ZSzJlK1XErzMfb2z/oMbEOV

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

Processes:

rundll32.exe

description	pid	process	target process
PID 1924 wrote to memory of 2472	1924	rundll32.exe	rundll32.exe
PID 1924 wrote to memory of 2472	1924	rundll32.exe	rundll32.exe
PID 1924 wrote to memory of 2472	1924	rundll32.exe	rundll32.exe
PID 1924 wrote to memory of 2472	1924	rundll32.exe	rundll32.exe
PID 1924 wrote to memory of 2472	1924	rundll32.exe	rundll32.exe
PID 1924 wrote to memory of 2472	1924	rundll32.exe	rundll32.exe
PID 1924 wrote to memory of 2472	1924	rundll32.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\NOTIFICACION_JUDICIAL\NOTIFICACION DEMANDA\intl.dll",#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1924

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\NOTIFICACION_JUDICIAL\NOTIFICACION DEMANDA\intl.dll",#1
2⤵
PID:2472