9887ecedaf913129087b2460d2a552e5dd25d3f3d492c9329849022c643b91b8

Analysis

max time kernel
143s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
14/06/2024, 14:17

Target

9887ecedaf913129087b2460d2a552e5dd25d3f3d492c9329849022c643b91b8.dll
Size

72KB
MD5

6b257fa37473283065619c6a1870f48a
SHA1

708ae0053725ae4abdfabe0c36388665f681f2b3
SHA256

9887ecedaf913129087b2460d2a552e5dd25d3f3d492c9329849022c643b91b8
SHA512

1f6e584d479bb01956f3de680587d5e67daa9a36f77528bed87a0de4eb6074cf1103f0be38d775f55df97207bf2b1d4ce889265b9ce5e9964938294940ff5fa2
SSDEEP

768:HrF8SwwBIPMt1ZAhgFv3w+slY7dw2oRa8EBwem+Ir87ZdnJ3TNmByRHm:Ztww+EiBq7ZoRa8EBwemJmrnpTNu0

Score

1^/10

Suspicious behavior: RenamesItself 1 IoCs

pid	Process
2388	rundll32.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4972 wrote to memory of 2388	4972	rundll32.exe	89
PID 4972 wrote to memory of 2388	4972	rundll32.exe	89
PID 4972 wrote to memory of 2388	4972	rundll32.exe	89

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\9887ecedaf913129087b2460d2a552e5dd25d3f3d492c9329849022c643b91b8.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4972
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\9887ecedaf913129087b2460d2a552e5dd25d3f3d492c9329849022c643b91b8.dll,#1
  2⤵
  - Suspicious behavior: RenamesItself
  PID:2388

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4136 --field-trial-handle=2692,i,8678872182442199182,12502579059484928042,262144 --variations-seed-version /prefetch:8
1⤵
PID:4564

memory/2388-0-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download