a2024df192c38d050f4ccc518a8f74d0c403892fb12a5a4b8d6d62510e7a4846

Analysis

max time kernel
143s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
16-06-2024 10:17

Target

a2024df192c38d050f4ccc518a8f74d0c403892fb12a5a4b8d6d62510e7a4846.dll
Size

51KB
MD5

78e55fc0aba75ea2632ac47038ad4b43
SHA1

7ddc99ebcd4dbf2b6ea8b270e3a5a12e3c5774fb
SHA256

a2024df192c38d050f4ccc518a8f74d0c403892fb12a5a4b8d6d62510e7a4846
SHA512

37034fe4b840efcca192060632ff9df2b52a06fb9422292aba0422649f831e18491ec1a267bd11fd945d6621d4315835d3f1fe9f776dfcef5696ecb0c830dce1
SSDEEP

768:3Er7XR1M6t6FikUE58ozVOB+6QcXn0cE5Y18BtrEZJjuSkwFOBezAsAMC6Hh4:3EXXM2HEhzVWKtrEZFxFOB3pMC6H

Score

1^/10

Suspicious behavior: RenamesItself 1 IoCs

pid	Process
3768	rundll32.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4788 wrote to memory of 3768	4788	rundll32.exe	89
PID 4788 wrote to memory of 3768	4788	rundll32.exe	89
PID 4788 wrote to memory of 3768	4788	rundll32.exe	89

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\a2024df192c38d050f4ccc518a8f74d0c403892fb12a5a4b8d6d62510e7a4846.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4788
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\a2024df192c38d050f4ccc518a8f74d0c403892fb12a5a4b8d6d62510e7a4846.dll,#1
  2⤵
  - Suspicious behavior: RenamesItself
  PID:3768

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4244,i,13035806169561352434,1332896185314862791,262144 --variations-seed-version --mojo-platform-channel-handle=3900 /prefetch:8
1⤵
PID:840

memory/3768-0-0x0000000074BE0000-0x0000000074BF0000-memory.dmp

Filesize
64KB

Download