bc151967630a01d745fc5c1e9009d2484b523df4fa5c14fd43a3395031e3c934

Analysis

max time kernel
92s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
23-05-2024 02:26

Target

bc151967630a01d745fc5c1e9009d2484b523df4fa5c14fd43a3395031e3c934.dll
Size

81KB
MD5

40bfca4c474a346386b459d171a02657
SHA1

8763a2931292d8097571773f6de9dcc4deaac497
SHA256

bc151967630a01d745fc5c1e9009d2484b523df4fa5c14fd43a3395031e3c934
SHA512

2ce057cb0bc33500c1b9ab8b38e6b053a04708a405728e4d1af1d131ed2814b5ac13f5c5b70ccef081b9071e3e174c9b80d4e36f3bdfc646100c498249c6cbd1
SSDEEP

1536:mtByXv7uWGEqXZKXTadSp7Lxw9zzBPw+iASUSFOj8sWHcdF7zenq8Wv:m4v4JKXTx71w0ArSsXF3enq8Wv

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

rundll32.exe

description	pid	process	target process
PID 736 wrote to memory of 4632	736	rundll32.exe	rundll32.exe
PID 736 wrote to memory of 4632	736	rundll32.exe	rundll32.exe
PID 736 wrote to memory of 4632	736	rundll32.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\bc151967630a01d745fc5c1e9009d2484b523df4fa5c14fd43a3395031e3c934.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:736

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\bc151967630a01d745fc5c1e9009d2484b523df4fa5c14fd43a3395031e3c934.dll,#1
2⤵
PID:4632