46ecd674d32916ecd62c1a78f7e50fa76c4e71301c26d3d6278fe4f88e45f517

Analysis

max time kernel
120s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
22-05-2024 22:27

Target

46ecd674d32916ecd62c1a78f7e50fa76c4e71301c26d3d6278fe4f88e45f517.dll
Size

908KB
MD5

72d3aaa041c0ed3c629af22a8cc3d6f0
SHA1

291f28721b9b9d28425762f13815adcaff2e4670
SHA256

46ecd674d32916ecd62c1a78f7e50fa76c4e71301c26d3d6278fe4f88e45f517
SHA512

f4a01c2db4dc5fb2905da87d557f8c8755dede924fed0547f62748e3a6851be1305f3103f72ab45c23135644fe4206f3e16d2049d9d42360a80246b00b50f604
SSDEEP

12288:HLeJfqPIL3BmqLIGc7MZ5WSRNPqHD8rBXNfH1L7gF1Lbw7RW:UqP410GH5WSR4HD8rBXNfVL7gF1INW

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

rundll32.exe

pid process

2004 rundll32.exe

pid	process
2004	rundll32.exe

Suspicious use of WriteProcessMemory 7 IoCs

Processes:

rundll32.exe

description	pid	process	target process
PID 1628 wrote to memory of 2004	1628	rundll32.exe	rundll32.exe
PID 1628 wrote to memory of 2004	1628	rundll32.exe	rundll32.exe
PID 1628 wrote to memory of 2004	1628	rundll32.exe	rundll32.exe
PID 1628 wrote to memory of 2004	1628	rundll32.exe	rundll32.exe
PID 1628 wrote to memory of 2004	1628	rundll32.exe	rundll32.exe
PID 1628 wrote to memory of 2004	1628	rundll32.exe	rundll32.exe
PID 1628 wrote to memory of 2004	1628	rundll32.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\46ecd674d32916ecd62c1a78f7e50fa76c4e71301c26d3d6278fe4f88e45f517.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1628
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\46ecd674d32916ecd62c1a78f7e50fa76c4e71301c26d3d6278fe4f88e45f517.dll,#1
  2⤵
  - Suspicious use of SetWindowsHookEx
  PID:2004

memory/2004-1-0x0000000010000000-0x00000000100F6000-memory.dmp

Filesize
984KB

Download
memory/2004-0-0x0000000010000000-0x00000000100F6000-memory.dmp

Filesize
984KB

Download