0bdc115aef8d58d2268275c231838e9cbd0c0b2a341fce80472f6ec83cf3e3fb

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
27/06/2024, 07:03

Target

Recover My Files v4/StarBurn.dll
Size

555KB
MD5

19f5a638948eb5d413c89ae62d1320ad
SHA1

431a8bb70a8754dbb8e2e2e26def6e1b1f30f477
SHA256

372a719d73ecb4d48c8b7d1654f167d5de0f73b4772b757cd60cf80f19d859a7
SHA512

5fa90c430b186e5d764cf75a12a3e9fe7447ba21d1a42231ec7b6f5f32c12dc46890af6919c9e723b3f85f3c5a83bd8b184a5020e3c72df39b2c2279c9375a25
SSDEEP

12288:k/gzbnMa1JPxCv4g14xdrt8kQaYfAc+IM6TG7H8:8x6g4gexdr+paYfAc+4G7c

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1076	2148	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2364 wrote to memory of 2148	2364	rundll32.exe	28
PID 2364 wrote to memory of 2148	2364	rundll32.exe	28
PID 2364 wrote to memory of 2148	2364	rundll32.exe	28
PID 2364 wrote to memory of 2148	2364	rundll32.exe	28
PID 2364 wrote to memory of 2148	2364	rundll32.exe	28
PID 2364 wrote to memory of 2148	2364	rundll32.exe	28
PID 2364 wrote to memory of 2148	2364	rundll32.exe	28
PID 2148 wrote to memory of 1076	2148	rundll32.exe	29
PID 2148 wrote to memory of 1076	2148	rundll32.exe	29
PID 2148 wrote to memory of 1076	2148	rundll32.exe	29
PID 2148 wrote to memory of 1076	2148	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Recover My Files v4\StarBurn.dll",#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2364
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Recover My Files v4\StarBurn.dll",#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2148
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2148 -s 224
    3⤵
    - Program crash
    PID:1076

memory/2148-0-0x0000000000350000-0x00000000003ED000-memory.dmp

Filesize
628KB

Download