5318739a0a7ac64d992edf27091adad9610a821c92f4a92793543b214d96a308

Analysis

max time kernel
94s
max time network
97s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
01-06-2024 13:23

Target

Accelerator.dll
Size

306KB
MD5

1c639c9f01f04c2c4a576e718c12eaf6
SHA1

79adbb97540ffe3123d95a52843894b4e866bd27
SHA256

4894790776e23b49b317a0efd243aae79d41f6f678a8167201a3e5ef98f6bd71
SHA512

d88f3a686623b3c06d7834d1dc8d5543a219379750634f254434069e69a18c3977183ae39341a3284bae325f53992a586ccd3a4462e99cd4302131fd431f48b2
SSDEEP

6144:Q2GMn+qaIrAf4pd3DecSGUHmJYSJuXEj0j888888888888W88888888888k4Q:b3+yt8SYiuc0j888888888888W88888m

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4228 wrote to memory of 3808	4228	rundll32.exe	84
PID 4228 wrote to memory of 3808	4228	rundll32.exe	84
PID 4228 wrote to memory of 3808	4228	rundll32.exe	84

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Accelerator.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4228
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\Accelerator.dll,#1
  2⤵
  PID:3808