eb91545aaafaceae5d78d1c186e87cd45388fc93ac3fabad08dfcf79e3ef7a40

Analysis

max time kernel
121s
max time network
131s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
07/07/2024, 05:07

Target

eb91545aaafaceae5d78d1c186e87cd45388fc93ac3fabad08dfcf79e3ef7a40.dll
Size

3.4MB
MD5

dbc37ba7858d06ce1641e83b18d588f9
SHA1

5ba29d88000abfff77f5bafe79dcaae9730ffa2b
SHA256

eb91545aaafaceae5d78d1c186e87cd45388fc93ac3fabad08dfcf79e3ef7a40
SHA512

301b2fe14f0c20ffa6462ac529bc41276ba7ee63acea263a50f2ec2bab3386de82ff83500b61a6316587815c5fc3d9dc532b10e480fa567ae5046fd45f4ef665
SSDEEP

12288:IteVGceT09MzaXPrMGpmcVKoKNGpCZl+9c1N9ASW/RE30Y3yGRhmrp6pxuZ0HlsE:iBcZ9Mza4GEN+m1N9AB230MRtTuCCc

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2336 wrote to memory of 2208	2336	rundll32.exe	30
PID 2336 wrote to memory of 2208	2336	rundll32.exe	30
PID 2336 wrote to memory of 2208	2336	rundll32.exe	30
PID 2336 wrote to memory of 2208	2336	rundll32.exe	30
PID 2336 wrote to memory of 2208	2336	rundll32.exe	30
PID 2336 wrote to memory of 2208	2336	rundll32.exe	30
PID 2336 wrote to memory of 2208	2336	rundll32.exe	30

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb91545aaafaceae5d78d1c186e87cd45388fc93ac3fabad08dfcf79e3ef7a40.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2336
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\eb91545aaafaceae5d78d1c186e87cd45388fc93ac3fabad08dfcf79e3ef7a40.dll,#1
  2⤵
  PID:2208