c5a44b3d265b10212fe02cc581453d1fe751d30091282e1e2217c73ab196a232

Analysis

max time kernel
142s
max time network
167s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
03-07-2024 15:00

Target

api-ms-win-crt-math-l1-1-0.dll
Size

28KB
MD5

db8eb373d11c14e7698acbb77e316578
SHA1

2ce8888d8c968602934d5cd16409758ea4a81fb4
SHA256

51b6fce544c7a61e4ef49137d10256cda690007da3a7b79526dc8772c96df6f8
SHA512

bb52e10bb62462b2962cc950c1ea1960af10a220312f914bffe84b1cc705753d524df2ef531ad1d60bb837b1187fd43efd582cc6b031ccfccdd9a03d6d83d781
SSDEEP

384:NOTEmbM4Oe5grykfIgTmLmW1hWQ1YHNfPfLeEdtpBjRYJf3dUdlaK:DEMq5grxfIndVYBbeElfYJuf

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

rundll32.exe

description	pid	Process	procid_target
PID 5116 wrote to memory of 776	5116	rundll32.exe	85
PID 5116 wrote to memory of 776	5116	rundll32.exe	85
PID 5116 wrote to memory of 776	5116	rundll32.exe	85

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\api-ms-win-crt-math-l1-1-0.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:5116
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\api-ms-win-crt-math-l1-1-0.dll,#1
  2⤵
  PID:776