aaf20e1523773d6a7f05297cb48c01b63ce2538ea47403191ff6cdc9f364b148

Analysis

max time kernel
1405s
max time network
1173s
platform
windows11-21h2_x64
resource
win11-20240508-en
resource tags

arch:x64arch:x86image:win11-20240508-enlocale:en-usos:windows11-21h2-x64system
submitted
13-05-2024 17:39

Target

Synapse-X-Revamped-main/CefSharp.Core.dll
Size

1.3MB
MD5

a44554d38b7a25a7ab2320fe731c5298
SHA1

c287a88fd3a064b387888f4bbc37a0630c877253
SHA256

35980974bdba6d5dd6a4dc1072e33aab77f72f56c46779cb0216e4801dcc36ab
SHA512

bd8956b7e8ca6d1129fbbb950dd913183b3e92601c2c900aed26d695782e4663654ac57074e1f0f2efcf9cced969487162910dc9bb52b42572d61994b07f2aad
SSDEEP

24576:yXIdphyvfDVKyFnp89jCbBNr0s7HQAqcwYhPolDexla9e6dhkOi0nK+++evP4ZcC:HsJKyzNr0s7HQAqcwYhPolDexla9e6dp

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

rundll32.exe

description	pid	process	target process
PID 1924 wrote to memory of 2828	1924	rundll32.exe	rundll32.exe
PID 1924 wrote to memory of 2828	1924	rundll32.exe	rundll32.exe
PID 1924 wrote to memory of 2828	1924	rundll32.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Synapse-X-Revamped-main\CefSharp.Core.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1924

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Synapse-X-Revamped-main\CefSharp.Core.dll,#1
2⤵
PID:2828