94fef3ee9512941ff1aa4c8a951598ae67c42b71fbc047d28f3164570497d0b0

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
26/05/2024, 03:43

Target

IPDev.SkinEditor.Design.dll
Size

92KB
MD5

3292edcde2f254626ba70a16db833cdc
SHA1

04389d7d7336757149691066ee6932cca9a9969d
SHA256

2d2c7d71422ae14098f1d9af8dae09d340f1c4da2e4aafdd6924f46d6353ff78
SHA512

c175d371ea7a5b53531e82df82b44974b86499308efa0464976c8b090e3fe057b6b24496ab6e6e8212403d7b725b1f90801453cfe281a74add94f9bc1d044c17
SSDEEP

1536:SZ6iMBbyzrroWFMQEX727hGRXif9BtcQEA1ZyjXBb8MylmJsYg668gnO+:i6iwArroWFMh+hGRwaNA1ZyjRgMylYhM

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 360 wrote to memory of 2192	360	rundll32.exe	28
PID 360 wrote to memory of 2192	360	rundll32.exe	28
PID 360 wrote to memory of 2192	360	rundll32.exe	28
PID 360 wrote to memory of 2192	360	rundll32.exe	28
PID 360 wrote to memory of 2192	360	rundll32.exe	28
PID 360 wrote to memory of 2192	360	rundll32.exe	28
PID 360 wrote to memory of 2192	360	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\IPDev.SkinEditor.Design.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:360
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\IPDev.SkinEditor.Design.dll,#1
  2⤵
  PID:2192