2f2819ff56abb1be2af1473a3f0b078823c5a2c23bffc2f06a51ba5cc1e33376

Analysis

max time kernel
94s
max time network
95s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
16/06/2024, 19:57

Target

2f2819ff56abb1be2af1473a3f0b078823c5a2c23bffc2f06a51ba5cc1e33376.dll
Size

23KB
MD5

377350c67a6212415630cc8f1c352347
SHA1

0e5de4c9b6e170b0d20aa20b61fccf120dcdaef3
SHA256

2f2819ff56abb1be2af1473a3f0b078823c5a2c23bffc2f06a51ba5cc1e33376
SHA512

92108427d8bb17e0ac0a09710ceb33a1e9f5c53347abcd717f4c27a6377f62cc08b97e7d6ed990f7f4fdd63862c5017ef9ff7a99b812fe1bf81f60db913efe4e
SSDEEP

384:zchAA4CRF6X2WKublS7MyYvSqGtPPPa1QGYAAbeZFU5p:zJ4L6GWK0WYqF0QSA6U5

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2144 wrote to memory of 3172	2144	rundll32.exe	81
PID 2144 wrote to memory of 3172	2144	rundll32.exe	81
PID 2144 wrote to memory of 3172	2144	rundll32.exe	81

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2f2819ff56abb1be2af1473a3f0b078823c5a2c23bffc2f06a51ba5cc1e33376.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2144
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\2f2819ff56abb1be2af1473a3f0b078823c5a2c23bffc2f06a51ba5cc1e33376.dll,#1
  2⤵
  PID:3172