277f8b8dc5158bf84c7aac8a6a12ee1b9168edcc68666d20e20f214f871c652e

Analysis

max time kernel
118s
max time network
120s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
08-05-2024 20:31

Target

277f8b8dc5158bf84c7aac8a6a12ee1b9168edcc68666d20e20f214f871c652e.dll
Size

30KB
MD5

1c99c11f090427310b096f57c36af42d
SHA1

4d5154e2dfd963ea5007b83ea938c2223a8c4565
SHA256

277f8b8dc5158bf84c7aac8a6a12ee1b9168edcc68666d20e20f214f871c652e
SHA512

30f1cf39102ec0d9c7b22b6f0a6ff590b3aba8524482d3f15d30353d0aee113a0a4abd297a59d8e6fc1107f959f36f12c0747394c4881e36d8993f11ff51f5aa
SSDEEP

384:mwVFXh7VWmTIWTs7otIR300K/NEHRN7hx5VXC4deR9zVjD1W:F1INR3VmAhPVXC4dC9zVj5W

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2020 wrote to memory of 1464	2020	rundll32.exe	28
PID 2020 wrote to memory of 1464	2020	rundll32.exe	28
PID 2020 wrote to memory of 1464	2020	rundll32.exe	28
PID 2020 wrote to memory of 1464	2020	rundll32.exe	28
PID 2020 wrote to memory of 1464	2020	rundll32.exe	28
PID 2020 wrote to memory of 1464	2020	rundll32.exe	28
PID 2020 wrote to memory of 1464	2020	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\277f8b8dc5158bf84c7aac8a6a12ee1b9168edcc68666d20e20f214f871c652e.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2020
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\277f8b8dc5158bf84c7aac8a6a12ee1b9168edcc68666d20e20f214f871c652e.dll,#1
  2⤵
  PID:1464