cfb86497e9be215117b351684ff0f311c67fda8c3e1eb179d3df76bd549565ec

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
23-05-2024 03:19

Target

cfb86497e9be215117b351684ff0f311c67fda8c3e1eb179d3df76bd549565ec.dll
Size

329KB
MD5

42f9a3e50b036b1eed194e3f172ae413
SHA1

8eda22ca1aae6648a093c514590ed87fb6142c42
SHA256

cfb86497e9be215117b351684ff0f311c67fda8c3e1eb179d3df76bd549565ec
SHA512

0d7d51bc3302d27af385bf7bf602dbc63bd7acc841b5e31e0aeb968b0a4a91e6fb93345d4639aa270116e198e399c40abdc818e1c7d2c51062cb36c8ee9c595e
SSDEEP

6144:RLmWnuNrNVUvPEmRyWHj8MVloEh5QLxCSPGIsTPNctYy6egz8zZ4SUcXgZIoi:RLmWuNrNVUXEYDQL5JsL+2DN8F4SUywi

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2248 wrote to memory of 2264	2248	rundll32.exe	28
PID 2248 wrote to memory of 2264	2248	rundll32.exe	28
PID 2248 wrote to memory of 2264	2248	rundll32.exe	28
PID 2248 wrote to memory of 2264	2248	rundll32.exe	28
PID 2248 wrote to memory of 2264	2248	rundll32.exe	28
PID 2248 wrote to memory of 2264	2248	rundll32.exe	28
PID 2248 wrote to memory of 2264	2248	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\cfb86497e9be215117b351684ff0f311c67fda8c3e1eb179d3df76bd549565ec.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2248
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\cfb86497e9be215117b351684ff0f311c67fda8c3e1eb179d3df76bd549565ec.dll,#1
  2⤵
  PID:2264