141cd988c5360a3cd5d22a6b3dcfef68d52eb77ad855f4739286bbbe730d9804

Analysis

max time kernel
124s
max time network
128s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
13/06/2024, 19:34

Target
141cd988c5360a3cd5d22a6b3dcfef68d52eb77ad855f4739286bbbe730d9804.dll
Size 7KB
Sample240613-yafdasydnd
SHA256 141cd988c5360a3cd5d22a6b3dcfef68d52eb77ad855f4739286bbbe730d9804
MD5 487fac2fd9f07246869f271682401943
SHA1 18a68d0f37c2b2ea214ceb73eed86251b1cc918b
SHA512 469a660e52ddbc58ade93d4b59f6e05a74fe021b7467ece82619c48bef84fd3eddfec016147173e9fde86573c6b7f70eb5973be045a59d43cf82ed72c1b44c0c
SSDEEP 96:VGEETrMLH551y5tolTGYkz9zFfLwL25OUfhy:efMHkwlTBk8L25OUfY
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2604 wrote to memory of 4092	2604	rundll32.exe	91
PID 2604 wrote to memory of 4092	2604	rundll32.exe	91
PID 2604 wrote to memory of 4092	2604	rundll32.exe	91

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\141cd988c5360a3cd5d22a6b3dcfef68d52eb77ad855f4739286bbbe730d9804.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2604
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\141cd988c5360a3cd5d22a6b3dcfef68d52eb77ad855f4739286bbbe730d9804.dll,#1
  2⤵
  PID:4092

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4140,i,1305347165619645738,15927664461101562802,262144 --variations-seed-version --mojo-platform-channel-handle=4116 /prefetch:8
1⤵
PID:452