53a8adc4abee09744bf4e7ebd713a651018240dad85cf4f76904c3c1f5a0d35d

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
25/04/2024, 19:15

Target

53a8adc4abee09744bf4e7ebd713a651018240dad85cf4f76904c3c1f5a0d35d.dll
Size

899KB
MD5

4a20420383589eaa4f5791010137cb87
SHA1

553f7b299042fee125da7877005180771c1bccde
SHA256

53a8adc4abee09744bf4e7ebd713a651018240dad85cf4f76904c3c1f5a0d35d
SHA512

1f2ced551117c2c4b2462516f52be0b83bbaeb7e59fa88847087378102068eb994ca356ad21a572e880c82916c080080b2eb030b4d4037074487a84a187a6a51
SSDEEP

24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXt:7wqd87Vt

Score

1^/10

Suspicious behavior: RenamesItself 1 IoCs

pid	Process
1312	rundll32.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2240 wrote to memory of 1312	2240	rundll32.exe	28
PID 2240 wrote to memory of 1312	2240	rundll32.exe	28
PID 2240 wrote to memory of 1312	2240	rundll32.exe	28
PID 2240 wrote to memory of 1312	2240	rundll32.exe	28
PID 2240 wrote to memory of 1312	2240	rundll32.exe	28
PID 2240 wrote to memory of 1312	2240	rundll32.exe	28
PID 2240 wrote to memory of 1312	2240	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\53a8adc4abee09744bf4e7ebd713a651018240dad85cf4f76904c3c1f5a0d35d.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2240
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\53a8adc4abee09744bf4e7ebd713a651018240dad85cf4f76904c3c1f5a0d35d.dll,#1
  2⤵
  - Suspicious behavior: RenamesItself
  PID:1312