93ccad7da461d477570c3238d96ce9e6d89720b2a4762daac95c3401f779eb4f

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
29/05/2024, 12:08

Target

93ccad7da461d477570c3238d96ce9e6d89720b2a4762daac95c3401f779eb4f.dll
Size

355KB
MD5

7d87c9c3f732475b254551d763b7b180
SHA1

ba1919a34ef04d9212dce167eaa8d11417677749
SHA256

93ccad7da461d477570c3238d96ce9e6d89720b2a4762daac95c3401f779eb4f
SHA512

1d88ca5e9dac03897408883337128fc3da95d5c2a5b9def4de270d67365b833e13bc15ea7f2a11cfae8db279a1ff856d0f02f84f5ea41f10b6145881ae1b09fd
SSDEEP

6144:fEh+YAdU39jMAtE2fJg98tM1u9VRSAPmZWMhTLpqCzvo0uwZucqRcFN0C:c+YAdU3VMyJg3WqkC/pqCzvPPjqRcFN

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 3012 wrote to memory of 2124	3012	rundll32.exe	28
PID 3012 wrote to memory of 2124	3012	rundll32.exe	28
PID 3012 wrote to memory of 2124	3012	rundll32.exe	28
PID 3012 wrote to memory of 2124	3012	rundll32.exe	28
PID 3012 wrote to memory of 2124	3012	rundll32.exe	28
PID 3012 wrote to memory of 2124	3012	rundll32.exe	28
PID 3012 wrote to memory of 2124	3012	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\93ccad7da461d477570c3238d96ce9e6d89720b2a4762daac95c3401f779eb4f.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3012
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\93ccad7da461d477570c3238d96ce9e6d89720b2a4762daac95c3401f779eb4f.dll,#1
  2⤵
  PID:2124

memory/2124-5-0x0000000074590000-0x00000000745D6000-memory.dmp

Filesize
280KB

Download
memory/2124-4-0x0000000074540000-0x0000000074586000-memory.dmp

Filesize
280KB

Download
memory/2124-3-0x0000000074590000-0x00000000745D6000-memory.dmp

Filesize
280KB

Download
memory/2124-6-0x00000000002D0000-0x000000000030C000-memory.dmp

Filesize
240KB

Download
memory/2124-2-0x00000000000D0000-0x00000000000D1000-memory.dmp

Filesize
4KB

Download
memory/2124-7-0x0000000074541000-0x0000000074559000-memory.dmp

Filesize
96KB

Download
memory/2124-1-0x0000000074540000-0x0000000074586000-memory.dmp

Filesize
280KB

Download
memory/2124-0-0x0000000074540000-0x0000000074586000-memory.dmp

Filesize
280KB

Download