90e447d7936a3b32c8f448b001780c066d6fc27f96cbd6e860383b7512a4b3a3

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
30-05-2024 10:32

Target

90e447d7936a3b32c8f448b001780c066d6fc27f96cbd6e860383b7512a4b3a3.dll
Size

1.8MB
MD5

526228884c7c7eb2214644bb1b3bfef4
SHA1

7c4710e7f36f0476e4f813dd3ef7f4beb4cb4152
SHA256

90e447d7936a3b32c8f448b001780c066d6fc27f96cbd6e860383b7512a4b3a3
SHA512

32b5289f11c329c9c70265369094bb82254266c67f662146233b7faddca9442ccea07c654162e0e4f331dd9ccb17cc9ebc7543e5500db4ec9d3c1e087ba25f9f
SSDEEP

49152:rn5FnpcjrKkJ1M6vDt7HFx2ivIFjq+VpATH7a:tFpRkFHvs9aH7a

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 1296 wrote to memory of 2996	1296	rundll32.exe	28
PID 1296 wrote to memory of 2996	1296	rundll32.exe	28
PID 1296 wrote to memory of 2996	1296	rundll32.exe	28
PID 1296 wrote to memory of 2996	1296	rundll32.exe	28
PID 1296 wrote to memory of 2996	1296	rundll32.exe	28
PID 1296 wrote to memory of 2996	1296	rundll32.exe	28
PID 1296 wrote to memory of 2996	1296	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\90e447d7936a3b32c8f448b001780c066d6fc27f96cbd6e860383b7512a4b3a3.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1296
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\90e447d7936a3b32c8f448b001780c066d6fc27f96cbd6e860383b7512a4b3a3.dll,#1
  2⤵
  PID:2996

memory/2996-0-0x0000000074B50000-0x0000000074FA1000-memory.dmp

Filesize
4.3MB

Download
memory/2996-11-0x0000000002DB0000-0x0000000002DB2000-memory.dmp

Filesize
8KB

Download
memory/2996-10-0x0000000002E20000-0x0000000002E21000-memory.dmp

Filesize
4KB

Download
memory/2996-9-0x0000000002E00000-0x0000000002E01000-memory.dmp

Filesize
4KB

Download
memory/2996-8-0x0000000002320000-0x0000000002321000-memory.dmp

Filesize
4KB

Download
memory/2996-7-0x0000000000B70000-0x0000000000B71000-memory.dmp

Filesize
4KB

Download
memory/2996-6-0x0000000000350000-0x0000000000351000-memory.dmp

Filesize
4KB

Download
memory/2996-5-0x00000000001C0000-0x00000000001C1000-memory.dmp

Filesize
4KB

Download
memory/2996-4-0x00000000009F0000-0x0000000000A3B000-memory.dmp

Filesize
300KB

Download
memory/2996-3-0x00000000746F0000-0x0000000074B41000-memory.dmp

Filesize
4.3MB

Download
memory/2996-2-0x0000000074B50000-0x0000000074FA1000-memory.dmp

Filesize
4.3MB

Download
memory/2996-1-0x00000000746F0000-0x0000000074B41000-memory.dmp

Filesize
4.3MB

Download