10720f46b3e53f0b54635b74a03a338cb3424a07e61f1d49b0357f08849a6fa5

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
30/06/2024, 18:49

Target

10720f46b3e53f0b54635b74a03a338cb3424a07e61f1d49b0357f08849a6fa5.dll
Size

414KB
MD5

2c25b1f3d976e362a3f06b0c8759b4c1
SHA1

8032f202f5e490d6f605e6b4529e3c7e482d8573
SHA256

10720f46b3e53f0b54635b74a03a338cb3424a07e61f1d49b0357f08849a6fa5
SHA512

5c272ec4876f9e1c039f0630f4e27240ad369d22b824e295f1734c63d55e1b3a4b1c3d65b07bd94b648d3e2731df815d3bee42e8cad717070762c37cfb75d3df
SSDEEP

3072:F0KI/iSUfrd70W1d37+QD77OJSx52zV6xYxC:3I/iSUfrd70W1Z97OJMCV6K

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1084	1672	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2204 wrote to memory of 1672	2204	rundll32.exe	28
PID 2204 wrote to memory of 1672	2204	rundll32.exe	28
PID 2204 wrote to memory of 1672	2204	rundll32.exe	28
PID 2204 wrote to memory of 1672	2204	rundll32.exe	28
PID 2204 wrote to memory of 1672	2204	rundll32.exe	28
PID 2204 wrote to memory of 1672	2204	rundll32.exe	28
PID 2204 wrote to memory of 1672	2204	rundll32.exe	28
PID 1672 wrote to memory of 1084	1672	rundll32.exe	29
PID 1672 wrote to memory of 1084	1672	rundll32.exe	29
PID 1672 wrote to memory of 1084	1672	rundll32.exe	29
PID 1672 wrote to memory of 1084	1672	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\10720f46b3e53f0b54635b74a03a338cb3424a07e61f1d49b0357f08849a6fa5.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2204
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\10720f46b3e53f0b54635b74a03a338cb3424a07e61f1d49b0357f08849a6fa5.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1672
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 1672 -s 244
    3⤵
    - Program crash
    PID:1084