1bd42a3b6ceb5a2ec8b5d8414e0f63405ac75e49d3d9199ed0a94dba6725f0e7

Analysis

max time kernel
117s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
13/05/2024, 10:56

Target

Hot CPU Tester Pro/bench.dll
Size

124KB
MD5

926a8ed1a202b663e58bb982c193a066
SHA1

420842ca9b06e521785eff928f4812319b2b2f52
SHA256

31bca71cde563b8ad4b30768295bf6d9f1091222d462899eb4bf911b0c71b294
SHA512

4385b9261eedc8eccb2ef934b9aee5ac3b8e21e599956f944b5564a6d7665ba12c0f20f652e84d0eb9cc95113f90b09b3f14f34d83c9397f6614a419b13bb0cc
SSDEEP

1536:4hQmACLchE1wfkdpuPiT7BAY/bBL8A33+p2L2wBhTH6QukTVD6crkLdy0:UQm/EExdbn/b2AnjuX6VD6KkLdJ

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2600 wrote to memory of 2208	2600	rundll32.exe	28
PID 2600 wrote to memory of 2208	2600	rundll32.exe	28
PID 2600 wrote to memory of 2208	2600	rundll32.exe	28
PID 2600 wrote to memory of 2208	2600	rundll32.exe	28
PID 2600 wrote to memory of 2208	2600	rundll32.exe	28
PID 2600 wrote to memory of 2208	2600	rundll32.exe	28
PID 2600 wrote to memory of 2208	2600	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Hot CPU Tester Pro\bench.dll",#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2600
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Hot CPU Tester Pro\bench.dll",#1
  2⤵
  PID:2208