aaf20e1523773d6a7f05297cb48c01b63ce2538ea47403191ff6cdc9f364b148

Analysis

max time kernel
1485s
max time network
1500s
platform
windows11-21h2_x64
resource
win11-20240426-en
resource tags

arch:x64arch:x86image:win11-20240426-enlocale:en-usos:windows11-21h2-x64system
submitted
13-05-2024 17:31

Target

Synapse-X-Revamped-main/CefSharp.Wpf.dll
Size

83KB
MD5

1533d9b2ed991ad4fecef548dc762565
SHA1

7a0664cc6bdc5ffd23c4aba43fa7b2acdfe949f4
SHA256

8e6e874d51f654c1c081cd1658a2e4ad8e3b92e74f9406e8c4eb34d354ab8791
SHA512

710677d3c6ebff9da638d22a3ae800eb12ba947aad9acb4e42f9e9268ade1b8dde680b4aa135121851285943aecc0fc9be85c5ca8a269d6857b35e905c7b7c12
SSDEEP

1536:VdX1kcRoMy1tkZBjxQVhfcmzedNTppNCSyh1FPmyGx8Nge8Fu/mGmDtcOd:VdFLoMk24ClwNge8FPGMf

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

rundll32.exe

description	pid	process	target process
PID 4340 wrote to memory of 4344	4340	rundll32.exe	rundll32.exe
PID 4340 wrote to memory of 4344	4340	rundll32.exe	rundll32.exe
PID 4340 wrote to memory of 4344	4340	rundll32.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Synapse-X-Revamped-main\CefSharp.Wpf.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4340

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Synapse-X-Revamped-main\CefSharp.Wpf.dll,#1
2⤵
PID:4344