8077e9ccfb26d715b6409d5995dc19aaed61da7ecd6f7954f0d9dbedd8902ca7

Analysis

max time kernel
119s
max time network
119s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
23-05-2024 03:15

Target

8077e9ccfb26d715b6409d5995dc19aaed61da7ecd6f7954f0d9dbedd8902ca7.dll
Size

1.6MB
MD5

d65537f890126331d41a340fe8e4b7a0
SHA1

0e0cce9135a4491d60706f2d1669da77d203eeef
SHA256

8077e9ccfb26d715b6409d5995dc19aaed61da7ecd6f7954f0d9dbedd8902ca7
SHA512

6e04420d1ff57f6a62ae8d672801d9d3bd736f191a7cce783dc8fcaff2277b2d481c5b2f0f7fb63bfabd499e086ae3dae6b80faa366620dcaa164b144750f790
SSDEEP

24576:cZOpXpZEo1+zMJ3Yq01tvjckyJHl01S6Y9DchcalO/GLiz6ZYR7+xF6iBBC95EYt:LbOo1Poq6tvmlHwW8I8Y8xFZCjEY/S5W

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1928	2296	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 1808 wrote to memory of 2296	1808	rundll32.exe	28
PID 1808 wrote to memory of 2296	1808	rundll32.exe	28
PID 1808 wrote to memory of 2296	1808	rundll32.exe	28
PID 1808 wrote to memory of 2296	1808	rundll32.exe	28
PID 1808 wrote to memory of 2296	1808	rundll32.exe	28
PID 1808 wrote to memory of 2296	1808	rundll32.exe	28
PID 1808 wrote to memory of 2296	1808	rundll32.exe	28
PID 2296 wrote to memory of 1928	2296	rundll32.exe	29
PID 2296 wrote to memory of 1928	2296	rundll32.exe	29
PID 2296 wrote to memory of 1928	2296	rundll32.exe	29
PID 2296 wrote to memory of 1928	2296	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\8077e9ccfb26d715b6409d5995dc19aaed61da7ecd6f7954f0d9dbedd8902ca7.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1808
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\8077e9ccfb26d715b6409d5995dc19aaed61da7ecd6f7954f0d9dbedd8902ca7.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2296
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2296 -s 220
    3⤵
    - Program crash
    PID:1928