59ae35d63bc58284444bea51a6bc9b299c4449382a0ae7067f8ce31ddfeee733

Analysis

max time kernel
51s
max time network
52s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
19/06/2024, 21:56

Target

59ae35d63bc58284444bea51a6bc9b299c4449382a0ae7067f8ce31ddfeee733.dll
Size

5KB
MD5

5b7bac4d91d33faf5725fb541e2d08bf
SHA1

d37485a318ceab985b05b4fb07b80651d2d3d956
SHA256

59ae35d63bc58284444bea51a6bc9b299c4449382a0ae7067f8ce31ddfeee733
SHA512

11f6c017f055bc3ff5df0ec616ef239e1f90c38ac9b68b25de8d26bc41bf57ccc98c6bf81e3fd4a7dc199996fbbe2a5599e4f005cbacbe05a07f4df8fad8aaf3
SSDEEP

96:DixZjmjtjd8jPjcZGR5TI/765mEIp+T1He:unSR6bgYmyhn1He

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4704 wrote to memory of 4048	4704	rundll32.exe	81
PID 4704 wrote to memory of 4048	4704	rundll32.exe	81
PID 4704 wrote to memory of 4048	4704	rundll32.exe	81

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\59ae35d63bc58284444bea51a6bc9b299c4449382a0ae7067f8ce31ddfeee733.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4704
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\59ae35d63bc58284444bea51a6bc9b299c4449382a0ae7067f8ce31ddfeee733.dll,#1
  2⤵
  PID:4048