e516db27d9fcdc830c025a4499b41d6839dd2c82c6a5a2df969014a1309d9e77

Analysis

max time kernel
142s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
07-06-2024 13:29

Target

e516db27d9fcdc830c025a4499b41d6839dd2c82c6a5a2df969014a1309d9e77.dll
Size

51KB
MD5

eb97546f7f8a998a50118666927b495a
SHA1

4f7f46addd7a4d66b3e8e1b6b9b41b1a05fa7b86
SHA256

e516db27d9fcdc830c025a4499b41d6839dd2c82c6a5a2df969014a1309d9e77
SHA512

c78de8a6b79fe10e4f95d804a84efdd3f78da270b389c60296136f854e8dfd112afc42fcadb770c2bbffedcf10d956692aa35d76ee55a257804d41b5abd104a7
SSDEEP

768:3Er7XR1M6t6FikUE58ozVOB+6QcXn0cE5Y18BtrEZJjuSkwFOBezesAMC6Hh4:3EXXM2HEhzVWKtrEZFxFOBFpMC6H

Score

1^/10

Suspicious behavior: RenamesItself 1 IoCs

pid	Process
1620	rundll32.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 656 wrote to memory of 1620	656	rundll32.exe	92
PID 656 wrote to memory of 1620	656	rundll32.exe	92
PID 656 wrote to memory of 1620	656	rundll32.exe	92

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\e516db27d9fcdc830c025a4499b41d6839dd2c82c6a5a2df969014a1309d9e77.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:656
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\e516db27d9fcdc830c025a4499b41d6839dd2c82c6a5a2df969014a1309d9e77.dll,#1
  2⤵
  - Suspicious behavior: RenamesItself
  PID:1620

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1348 --field-trial-handle=2284,i,15722001240173834669,15048020084704567542,262144 --variations-seed-version /prefetch:8
1⤵
PID:3612

memory/1620-0-0x0000000074A50000-0x0000000074A60000-memory.dmp

Filesize
64KB

Download