fd6d619f32068375259ecd0b63b16b1873b894118f6a13102510199e636d0e6b

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
26/05/2024, 06:03

Target

fd6d619f32068375259ecd0b63b16b1873b894118f6a13102510199e636d0e6b.dll
Size

1.1MB
MD5

f72d9d878c9f3fff736af226d74138b1
SHA1

90bf02d498820a51f794134d760109689d06c14c
SHA256

fd6d619f32068375259ecd0b63b16b1873b894118f6a13102510199e636d0e6b
SHA512

40fbd258d32a32369c62f135b4dbd2208936c294a5c1f29cd6d993dc6a00bd289e74efa0367c74df169343cfbb0ff7733795f10976dd238c63c9b14874d8fade
SSDEEP

24576:a33PJoGtrcoWoHFP2oBzqcsE7XuhfWYZwmSwxovBStTbS3uIsjwWv4ZyN:ahoC5HsLY7gvwhN3uIsjpVN

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

pid	Process
2336	rundll32.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 756 wrote to memory of 2336	756	rundll32.exe	28
PID 756 wrote to memory of 2336	756	rundll32.exe	28
PID 756 wrote to memory of 2336	756	rundll32.exe	28
PID 756 wrote to memory of 2336	756	rundll32.exe	28
PID 756 wrote to memory of 2336	756	rundll32.exe	28
PID 756 wrote to memory of 2336	756	rundll32.exe	28
PID 756 wrote to memory of 2336	756	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\fd6d619f32068375259ecd0b63b16b1873b894118f6a13102510199e636d0e6b.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:756
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\fd6d619f32068375259ecd0b63b16b1873b894118f6a13102510199e636d0e6b.dll,#1
  2⤵
  - Suspicious use of NtSetInformationThreadHideFromDebugger
  PID:2336

memory/2336-4-0x0000000074A20000-0x0000000074C49000-memory.dmp

Filesize
2.2MB

Download
memory/2336-3-0x0000000074A20000-0x0000000074C49000-memory.dmp

Filesize
2.2MB

Download
memory/2336-2-0x0000000074C50000-0x0000000074E79000-memory.dmp

Filesize
2.2MB

Download
memory/2336-1-0x0000000074A20000-0x0000000074C49000-memory.dmp

Filesize
2.2MB

Download
memory/2336-0-0x0000000074C50000-0x0000000074E79000-memory.dmp

Filesize
2.2MB

Download
memory/2336-6-0x0000000074A20000-0x0000000074C49000-memory.dmp

Filesize
2.2MB

Download