0c860b7f821fc9d1ac0d91410201743febcf459b95c848529a8f816a9309a240

Analysis

max time kernel
90s
max time network
96s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
12/06/2024, 22:53

Target
ikuacc.dll
Size 4.5MB
Sample240612-2t4f1stfmg
SHA256 e3d82685c523f6a192faac7a6fe2c8609c0ca121d2fefc0025d7eb589a2336f7
MD5 7968e0046a0d36d52569e49ba7e51624
SHA1 79d1c37876df0c087235e8bae60ff6e9998abcec
SHA512 8c515f108b0f28b25984a53970e9c2bfb12b125890757796ac16014a24eb45cd45b2717cc5cf787932f33d6e1602e9fa3ec84f2c0c43b0856dadd3f7f87a30c0
SSDEEP 98304:K+zCsld0tODoAguXYWkf87iAwnVcTI+Jzv:KWCsd+OnguXYWfs+t
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2420 wrote to memory of 4760	2420	rundll32.exe	83
PID 2420 wrote to memory of 4760	2420	rundll32.exe	83
PID 2420 wrote to memory of 4760	2420	rundll32.exe	83

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\ikuacc.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2420
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\ikuacc.dll,#1
  2⤵
  PID:4760