c903573d30819580023f679211c86bfac7b987ddd5ead273047513179bd70d68

Analysis

max time kernel
133s
max time network
102s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
24/05/2024, 12:31

Target

JpMapControl.dll
Size

537KB
MD5

60bde3656b15e2eff96b8c2d9cad3c53
SHA1

6a4b2b37a2bdc81723768f70361e7bcb11318ccc
SHA256

c903573d30819580023f679211c86bfac7b987ddd5ead273047513179bd70d68
SHA512

a74a5be6a7e34f397f9a8a354e5c185a9f5022c56d9924bb3b92d1affdce84cab21c27252864ee44655d3792f35aa9773099d15ee94d6894ff59dca87292e40e
SSDEEP

12288:Gf/PSZw8vfCF+OS98kA844ouJiQJJuTgx6ys/iIYDNkbakne31VNZEWsqaG5dhW5:Gf/qZw8vfCF+OSXJiQJJuK2G5uqz0j3D

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3284 wrote to memory of 3824	3284	rundll32.exe	82
PID 3284 wrote to memory of 3824	3284	rundll32.exe	82
PID 3284 wrote to memory of 3824	3284	rundll32.exe	82

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\JpMapControl.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3284
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\JpMapControl.dll,#1
  2⤵
  PID:3824