55dd41e0614ba9b4406c926cc1fd970351d14d11552f3a85d522af46b0a49e46

Analysis

max time kernel
146s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
18-05-2024 17:38

Target

SynapseX revamaped V1.2/bin/chrome_elf.dll
Size

788KB
MD5

6499ea6b92ab4971886bd06c12625819
SHA1

5ebb75eeca7625b9511233158a02f50a92867a39
SHA256

6820f276c0d71557a0c7b997fd2f4a3ac6a45c86454c4dc3bcfa29843b5c470b
SHA512

e57703730e42eb9d80e762337e08176705b349f54fbd429edc657d44c9dc3a1f9ccfa594bc3ef622798aebb5bc69b225abb266b00f9b350ae59f734c2f31f63d
SSDEEP

12288:bCr6Tisy+fUv6cwQhl0j+iBQIR+ybWlkkswiS1cVlqoKe9+nIMQbNt:Wr6Tisy+fUv6cwQhlcbWFi8iDjD

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

rundll32.exe

description	pid	process	target process
PID 2252 wrote to memory of 2032	2252	rundll32.exe	rundll32.exe
PID 2252 wrote to memory of 2032	2252	rundll32.exe	rundll32.exe
PID 2252 wrote to memory of 2032	2252	rundll32.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\SynapseX revamaped V1.2\bin\chrome_elf.dll",#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2252

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\SynapseX revamaped V1.2\bin\chrome_elf.dll",#1
2⤵
PID:2032