6a2d2093d90991fc94436a48a9d9434720d84774ef2e9328602e9b9c6371d8f0

Analysis

max time kernel
145s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
23-05-2024 01:12

Target

6a2d2093d90991fc94436a48a9d9434720d84774ef2e9328602e9b9c6371d8f0.dll
Size

397KB
MD5

24db8ac99b7cd3696a3e24d9c05796d0
SHA1

03bddae5163526035c5b69f5fe4d651d1438b9c9
SHA256

6a2d2093d90991fc94436a48a9d9434720d84774ef2e9328602e9b9c6371d8f0
SHA512

54108f43881c4b89e2eb636189e3144503d3546d1211c7309203f4d0c498e53b309bd1390f4e64198644ecd424e420799302754e97a2fbc547418165d3d1e3da
SSDEEP

6144:Q0sDksZBO8/b4ljfyuExIV08yBki+qD1JsjSELkEHUmskQV1VfqtLuWau:QRZBO8j4tqVS2klSJRhkK19q4Wa

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

rundll32.exe

description	pid	process	target process
PID 4776 wrote to memory of 3604	4776	rundll32.exe	rundll32.exe
PID 4776 wrote to memory of 3604	4776	rundll32.exe	rundll32.exe
PID 4776 wrote to memory of 3604	4776	rundll32.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6a2d2093d90991fc94436a48a9d9434720d84774ef2e9328602e9b9c6371d8f0.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4776

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6a2d2093d90991fc94436a48a9d9434720d84774ef2e9328602e9b9c6371d8f0.dll,#1
2⤵
PID:3604

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3376 --field-trial-handle=2292,i,2103142837140538807,15881446839139365070,262144 --variations-seed-version /prefetch:8
1⤵
PID:3608

memory/3604-0-0x00000000752D0000-0x000000007533E000-memory.dmp

Filesize
440KB

Download
memory/3604-1-0x0000000000700000-0x0000000000701000-memory.dmp

Filesize
4KB

Download