73159dff2f91bbc3718706d1b77943a1798907f76e387bb45c4bf32ab0e10855

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
22-05-2024 23:07

Target

73159dff2f91bbc3718706d1b77943a1798907f76e387bb45c4bf32ab0e10855.dll
Size

81KB
MD5

deafa0754f80a5300bd8b0048843fed3
SHA1

e4d85856d4e0969afde0cbf59bf5c6e17b33954c
SHA256

73159dff2f91bbc3718706d1b77943a1798907f76e387bb45c4bf32ab0e10855
SHA512

b19298d9439a6bb3835b6babc275c89f5fa31dd167a6c88adca96f0823d54d8f9a33a5fcd3b81bc24d9bec00727dc2f6e88c573d9cd3233f05ad5d85c42d9465
SSDEEP

1536:7tByXv7uWGEqXZKXTadSp7Lxw9zzBPw+iASUSFOj8sWHcdF7zenq8WB:74v4JKXTx71w0ArSsXF3enq8WB

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

Processes:

rundll32.exe

description	pid	process	target process
PID 2328 wrote to memory of 2420	2328	rundll32.exe	rundll32.exe
PID 2328 wrote to memory of 2420	2328	rundll32.exe	rundll32.exe
PID 2328 wrote to memory of 2420	2328	rundll32.exe	rundll32.exe
PID 2328 wrote to memory of 2420	2328	rundll32.exe	rundll32.exe
PID 2328 wrote to memory of 2420	2328	rundll32.exe	rundll32.exe
PID 2328 wrote to memory of 2420	2328	rundll32.exe	rundll32.exe
PID 2328 wrote to memory of 2420	2328	rundll32.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\73159dff2f91bbc3718706d1b77943a1798907f76e387bb45c4bf32ab0e10855.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2328

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\73159dff2f91bbc3718706d1b77943a1798907f76e387bb45c4bf32ab0e10855.dll,#1
2⤵
PID:2420