55dd41e0614ba9b4406c926cc1fd970351d14d11552f3a85d522af46b0a49e46

Analysis

max time kernel
142s
max time network
159s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
15-05-2024 21:56

Target

SynapseX revamaped V1.2/bin/CefSharp.Wpf.dll
Size

83KB
MD5

1533d9b2ed991ad4fecef548dc762565
SHA1

7a0664cc6bdc5ffd23c4aba43fa7b2acdfe949f4
SHA256

8e6e874d51f654c1c081cd1658a2e4ad8e3b92e74f9406e8c4eb34d354ab8791
SHA512

710677d3c6ebff9da638d22a3ae800eb12ba947aad9acb4e42f9e9268ade1b8dde680b4aa135121851285943aecc0fc9be85c5ca8a269d6857b35e905c7b7c12
SSDEEP

1536:VdX1kcRoMy1tkZBjxQVhfcmzedNTppNCSyh1FPmyGx8Nge8Fu/mGmDtcOd:VdFLoMk24ClwNge8FPGMf

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

rundll32.exe

description	pid	process	target process
PID 4580 wrote to memory of 5024	4580	rundll32.exe	rundll32.exe
PID 4580 wrote to memory of 5024	4580	rundll32.exe	rundll32.exe
PID 4580 wrote to memory of 5024	4580	rundll32.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\SynapseX revamaped V1.2\bin\CefSharp.Wpf.dll",#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4580

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\SynapseX revamaped V1.2\bin\CefSharp.Wpf.dll",#1
2⤵
PID:5024