310013941d447cfc320ce410a880392b05a0986bff8e8c449e1a0f413020f31b

Analysis

max time kernel
93s
max time network
70s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
16-06-2024 20:02

Target

310013941d447cfc320ce410a880392b05a0986bff8e8c449e1a0f413020f31b.dll
Size

2.5MB
MD5

f0fb3e42854cebfea2da182afebf47af
SHA1

b63493ed583b9aec2096a79152a1447e667830d5
SHA256

310013941d447cfc320ce410a880392b05a0986bff8e8c449e1a0f413020f31b
SHA512

4ef3d5bfe691e51333762be4f601276ce2bb443e7afba85b0d217399aacd9a8e1d248de6971b9c9dd159ef183fa448895a6e6421a0fb811ee8cf3f8c126b759e
SSDEEP

49152:Fgi3PmnDiN+0BI/mQNpgAZb40zOaoiOPUGWbmKL4:R3PmnDeBomYpLZ/zwiOMGWf

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4140 wrote to memory of 4480	4140	rundll32.exe	81
PID 4140 wrote to memory of 4480	4140	rundll32.exe	81
PID 4140 wrote to memory of 4480	4140	rundll32.exe	81

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\310013941d447cfc320ce410a880392b05a0986bff8e8c449e1a0f413020f31b.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4140
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\310013941d447cfc320ce410a880392b05a0986bff8e8c449e1a0f413020f31b.dll,#1
  2⤵
  PID:4480

memory/4480-0-0x0000000000920000-0x0000000000926000-memory.dmp

Filesize
24KB

Download
memory/4480-1-0x0000000010000000-0x0000000010278000-memory.dmp

Filesize
2.5MB

Download
memory/4480-3-0x00000000027E0000-0x00000000028E9000-memory.dmp

Filesize
1.0MB

Download
memory/4480-4-0x00000000028F0000-0x00000000029DF000-memory.dmp

Filesize
956KB

Download
memory/4480-7-0x00000000028F0000-0x00000000029DF000-memory.dmp

Filesize
956KB

Download
memory/4480-8-0x0000000010000000-0x0000000010278000-memory.dmp

Filesize
2.5MB

Download
memory/4480-12-0x00000000028F0000-0x00000000029DF000-memory.dmp

Filesize
956KB

Download
memory/4480-14-0x0000000000B50000-0x0000000000C32000-memory.dmp

Filesize
904KB

Download
memory/4480-13-0x00000000029E0000-0x00000000041B2000-memory.dmp

Filesize
23.8MB

Download
memory/4480-16-0x00000000041C0000-0x00000000042A0000-memory.dmp

Filesize
896KB

Download
memory/4480-17-0x00000000041C0000-0x00000000042A0000-memory.dmp

Filesize
896KB

Download
memory/4480-19-0x00000000041C0000-0x00000000042A0000-memory.dmp

Filesize
896KB

Download
memory/4480-20-0x0000000000800000-0x0000000000802000-memory.dmp

Filesize
8KB

Download
memory/4480-21-0x0000000064950000-0x0000000064954000-memory.dmp

Filesize
16KB

Download