6ae8fc4a47782efb68c435abfe29c1962e6b6273e6d3f289dce7ecdf84017809

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
25-05-2024 09:36

Target

6ae8fc4a47782efb68c435abfe29c1962e6b6273e6d3f289dce7ecdf84017809.dll
Size

2.0MB
MD5

9553923ac77dd68b7d94b57a1ccb829f
SHA1

8a4f3877977ed9b9abc98e31a29d89e896ae3dc1
SHA256

6ae8fc4a47782efb68c435abfe29c1962e6b6273e6d3f289dce7ecdf84017809
SHA512

cc8eeaea1f7f16cf586d0480e506951de807f3949eb92a915e27935c02ef09755b98ba155ae71e38866e3e4f9670ddc1b83ac368bfce7bff6c2c47b3ef145458
SSDEEP

49152:SpW2WCN9mIFOKjQ5TwkonUr1q7NWcPjH3hPbC5GMhE:SpW2WCDmIFOh5Tw+q7NWsXh

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1716	2232	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2236 wrote to memory of 2232	2236	rundll32.exe	28
PID 2236 wrote to memory of 2232	2236	rundll32.exe	28
PID 2236 wrote to memory of 2232	2236	rundll32.exe	28
PID 2236 wrote to memory of 2232	2236	rundll32.exe	28
PID 2236 wrote to memory of 2232	2236	rundll32.exe	28
PID 2236 wrote to memory of 2232	2236	rundll32.exe	28
PID 2236 wrote to memory of 2232	2236	rundll32.exe	28
PID 2232 wrote to memory of 1716	2232	rundll32.exe	29
PID 2232 wrote to memory of 1716	2232	rundll32.exe	29
PID 2232 wrote to memory of 1716	2232	rundll32.exe	29
PID 2232 wrote to memory of 1716	2232	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6ae8fc4a47782efb68c435abfe29c1962e6b6273e6d3f289dce7ecdf84017809.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2236
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6ae8fc4a47782efb68c435abfe29c1962e6b6273e6d3f289dce7ecdf84017809.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2232
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2232 -s 256
    3⤵
    - Program crash
    PID:1716