025ca9a56a4ab20702dd386fef1d2df311646fb741841cc64d70d37f84468876

Analysis

max time kernel
148s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
22-05-2024 23:31

Target

DriverInstall/360P2SP.dll
Size

722KB
MD5

7bbb4fc60a265763b699a5b0c024b6e1
SHA1

4d5bf979ae3028ab04fce2c371eb8e7963dbd7e8
SHA256

392c73b9b6bf65b48798fd3670e20664f061358c43cd830409e4320826bb060b
SHA512

43ab7951e281aa66c0ab45e4e4f197bb604a90256b4e1c8f7699816fafd2453fa83c4caf0cd11e6810224882d4f692a68809ff26e528b2b31b481d82a3b8dc7d
SSDEEP

12288:rA1j5Aeh9zZfHCLv9xvDcHO92/bjtStavW87l8E2BwpoDJ1hLE8myABvOZo9TX5e:MV5zBZ/CLv9xvDXE/Z+Kmw+DJ3LEry8I

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

rundll32.exe

description	pid	process	target process
PID 116 wrote to memory of 4840	116	rundll32.exe	rundll32.exe
PID 116 wrote to memory of 4840	116	rundll32.exe	rundll32.exe
PID 116 wrote to memory of 4840	116	rundll32.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\DriverInstall\360P2SP.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:116

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\DriverInstall\360P2SP.dll,#1
2⤵
PID:4840