2e3c1efdddf5ea39d495d0c94031c37b0ca4114dbe7a68d68f3343ca5ba87bf6

Analysis

max time kernel
118s
max time network
120s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
05/06/2024, 20:33

Target

2e3c1efdddf5ea39d495d0c94031c37b0ca4114dbe7a68d68f3343ca5ba87bf6.dll
Size

81KB
MD5

2b1e286a56fb4ef901210e929b628a26
SHA1

f930819307719ace8af0eb4fa2fd1b8dbf80e276
SHA256

2e3c1efdddf5ea39d495d0c94031c37b0ca4114dbe7a68d68f3343ca5ba87bf6
SHA512

24a9ed8cf2f5c889f5bf194cdcd1542a6d56982438f23d40c032699679c6f898007eaa3eee5cd01ff7740d6c8a1a98f15c58fbe8f0207b4eeed5fff5a889e1bf
SSDEEP

1536:NtByXv7uWGEqXZKXTadSp7Lxw9zzBPw+iASUSFOj8sWHcdF7zenq8WV:N4v4JKXTx71w0ArSsXF3enq8WV

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2240 wrote to memory of 2288	2240	rundll32.exe	28
PID 2240 wrote to memory of 2288	2240	rundll32.exe	28
PID 2240 wrote to memory of 2288	2240	rundll32.exe	28
PID 2240 wrote to memory of 2288	2240	rundll32.exe	28
PID 2240 wrote to memory of 2288	2240	rundll32.exe	28
PID 2240 wrote to memory of 2288	2240	rundll32.exe	28
PID 2240 wrote to memory of 2288	2240	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2e3c1efdddf5ea39d495d0c94031c37b0ca4114dbe7a68d68f3343ca5ba87bf6.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2240
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\2e3c1efdddf5ea39d495d0c94031c37b0ca4114dbe7a68d68f3343ca5ba87bf6.dll,#1
  2⤵
  PID:2288