93ccad7da461d477570c3238d96ce9e6d89720b2a4762daac95c3401f779eb4f

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
29/05/2024, 12:08

Target

93ccad7da461d477570c3238d96ce9e6d89720b2a4762daac95c3401f779eb4f.dll
Size

355KB
MD5

7d87c9c3f732475b254551d763b7b180
SHA1

ba1919a34ef04d9212dce167eaa8d11417677749
SHA256

93ccad7da461d477570c3238d96ce9e6d89720b2a4762daac95c3401f779eb4f
SHA512

1d88ca5e9dac03897408883337128fc3da95d5c2a5b9def4de270d67365b833e13bc15ea7f2a11cfae8db279a1ff856d0f02f84f5ea41f10b6145881ae1b09fd
SSDEEP

6144:fEh+YAdU39jMAtE2fJg98tM1u9VRSAPmZWMhTLpqCzvo0uwZucqRcFN0C:c+YAdU3VMyJg3WqkC/pqCzvPPjqRcFN

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3484 wrote to memory of 4028	3484	rundll32.exe	82
PID 3484 wrote to memory of 4028	3484	rundll32.exe	82
PID 3484 wrote to memory of 4028	3484	rundll32.exe	82

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\93ccad7da461d477570c3238d96ce9e6d89720b2a4762daac95c3401f779eb4f.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3484
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\93ccad7da461d477570c3238d96ce9e6d89720b2a4762daac95c3401f779eb4f.dll,#1
  2⤵
  PID:4028

memory/4028-6-0x00000000013B0000-0x00000000013B1000-memory.dmp

Filesize
4KB

Download
memory/4028-5-0x00000000757D0000-0x0000000075816000-memory.dmp

Filesize
280KB

Download
memory/4028-4-0x00000000757E9000-0x00000000757EA000-memory.dmp

Filesize
4KB

Download
memory/4028-3-0x0000000002D90000-0x0000000002DCC000-memory.dmp

Filesize
240KB

Download
memory/4028-2-0x00000000757D0000-0x0000000075816000-memory.dmp

Filesize
280KB

Download
memory/4028-0-0x00000000757D0000-0x0000000075816000-memory.dmp

Filesize
280KB

Download
memory/4028-1-0x00000000757D0000-0x0000000075816000-memory.dmp

Filesize
280KB

Download
memory/4028-7-0x00000000757D0000-0x0000000075816000-memory.dmp

Filesize
280KB

Download