07abd2068a5da1d6e3a8746322be4a62d6de2a84d0972fba2c8c542827f320a4

Analysis

max time kernel
135s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
23/05/2024, 18:21

Target
07abd2068a5da1d6e3a8746322be4a62d6de2a84d0972fba2c8c542827f320a4.dll
Size 3.6MB
Sample240523-wzhtlsbf76
SHA256 07abd2068a5da1d6e3a8746322be4a62d6de2a84d0972fba2c8c542827f320a4
MD5 effb28ed3ca1e6bec003e76ebdc0c0b9
SHA1 5df67bfb00572b5bd625787b4b2cf84c2777af3e
SHA512 69cbbe278db8d420cac1f4b2d3060b026eb51aa4c35a8fb1ec1156e7de7fd3be37b4ab73b57aa97a596fbf197196143566ca665f4ae22eca1f4e3be717d6e6e1
SSDEEP 49152:vl1SNZcDCNmtVyTLREC8qtF516oWE9eixQccAN61Wo+gO61Wo+geRv361Wo+gXSn:iEC8A716om0bQZ0BqIWJ
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3432 wrote to memory of 4124	3432	rundll32.exe	83
PID 3432 wrote to memory of 4124	3432	rundll32.exe	83
PID 3432 wrote to memory of 4124	3432	rundll32.exe	83

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\07abd2068a5da1d6e3a8746322be4a62d6de2a84d0972fba2c8c542827f320a4.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3432
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\07abd2068a5da1d6e3a8746322be4a62d6de2a84d0972fba2c8c542827f320a4.dll,#1
  2⤵
  PID:4124