3347fdda939f65987de99c02b7cc94601617be7dc29451509884777b5ef78d1d

Analysis

max time kernel
141s
max time network
161s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
12/06/2024, 09:51

Target
3347fdda939f65987de99c02b7cc94601617be7dc29451509884777b5ef78d1d.dll
Size 1.5MB
Sample240612-lvw6bstfpp
SHA256 3347fdda939f65987de99c02b7cc94601617be7dc29451509884777b5ef78d1d
MD5 3ae65e7de6b096a479bb83c8d9c24845
SHA1 556ba63be45a3b22e27b9d7d2974376a582e510c
SHA512 2b11bae2302ab33ef325461e54772769f20ac4d0acf5d73f907f2dfa086026d3692357edd2602e4fa26c312b4785ec66760a9183667d7d4b46982b95e1e63458
SSDEEP 24576:QRDVUFVkWieSlgw5+qgo0bypOKV+qYQ+TgU2CPlvwF1f4NMfJodAtB1WPAKyrtip:QRDVRWelh5+BHbsV+qd+MU1ta1AufJoJ
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious behavior: EnumeratesProcesses 10 IoCs

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3484 wrote to memory of 1284	3484	rundll32.exe	91
PID 3484 wrote to memory of 1284	3484	rundll32.exe	91
PID 3484 wrote to memory of 1284	3484	rundll32.exe	91

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\3347fdda939f65987de99c02b7cc94601617be7dc29451509884777b5ef78d1d.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3484
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\3347fdda939f65987de99c02b7cc94601617be7dc29451509884777b5ef78d1d.dll,#1
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1284

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4472 --field-trial-handle=2656,i,16940681401824032220,151921362336696246,262144 --variations-seed-version /prefetch:8
1⤵
PID:4904

memory/1284-0-0x0000000075830000-0x0000000075831000-memory.dmp

Download