9133a122a7490cb676cb187be188896efcd14a97fc7563d3831b7d115beefacd

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
23-05-2024 01:44

Target

9133a122a7490cb676cb187be188896efcd14a97fc7563d3831b7d115beefacd.dll
Size

7.5MB
MD5

55f4024ed46a5bed539ed9bb49077c64
SHA1

4e9edc1e9f39d31a8fa101513b35249c1c52f399
SHA256

9133a122a7490cb676cb187be188896efcd14a97fc7563d3831b7d115beefacd
SHA512

d9d3901dcbaa6a93540e847d40257423e6c24d10616595e597defa105f2f191b3182eb21c5287cda3bdf6a63073f7c82fbcedc40b76f42d54ee27f9a7761e187
SSDEEP

49152:UTXYcZYlrXIGLF3LyzADx04LolcAKqyLCtmorGWQKojLje3DitHxQH7kn3L:UTXtC+GIze0YoFKqyLcNGhRkDSHxu

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

Processes:

rundll32.exe

description	pid	process	target process
PID 2180 wrote to memory of 2380	2180	rundll32.exe	rundll32.exe
PID 2180 wrote to memory of 2380	2180	rundll32.exe	rundll32.exe
PID 2180 wrote to memory of 2380	2180	rundll32.exe	rundll32.exe
PID 2180 wrote to memory of 2380	2180	rundll32.exe	rundll32.exe
PID 2180 wrote to memory of 2380	2180	rundll32.exe	rundll32.exe
PID 2180 wrote to memory of 2380	2180	rundll32.exe	rundll32.exe
PID 2180 wrote to memory of 2380	2180	rundll32.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\9133a122a7490cb676cb187be188896efcd14a97fc7563d3831b7d115beefacd.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2180

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\9133a122a7490cb676cb187be188896efcd14a97fc7563d3831b7d115beefacd.dll,#1
2⤵
PID:2380