942c5b22e16bc451e340866f903df46712c77ac6c654cd2c847d5d717a4dd5cb

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
09-07-2024 02:08

Target

942c5b22e16bc451e340866f903df46712c77ac6c654cd2c847d5d717a4dd5cb.dll
Size

6KB
MD5

acf003238461efe0c8b354cef7faae5e
SHA1

3cb84b30aa4ba66e18659e333a06218258f6eb19
SHA256

942c5b22e16bc451e340866f903df46712c77ac6c654cd2c847d5d717a4dd5cb
SHA512

d71b2abe6661c77b31526d3b9ec43fc54da5cf1b505c583c8c107706b36c384b86a903ebace0363a685f0336b6f5f466828167da5096a88fe40434783e4f89aa
SSDEEP

96:nEY2RrF1eqwi4ChmHiImMzgxbzSHwvPgXcM000HMDd:EHRh1eppCeezuwnqcX00HM

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2604 wrote to memory of 2128	2604	rundll32.exe	30
PID 2604 wrote to memory of 2128	2604	rundll32.exe	30
PID 2604 wrote to memory of 2128	2604	rundll32.exe	30
PID 2604 wrote to memory of 2128	2604	rundll32.exe	30
PID 2604 wrote to memory of 2128	2604	rundll32.exe	30
PID 2604 wrote to memory of 2128	2604	rundll32.exe	30
PID 2604 wrote to memory of 2128	2604	rundll32.exe	30

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\942c5b22e16bc451e340866f903df46712c77ac6c654cd2c847d5d717a4dd5cb.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2604
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\942c5b22e16bc451e340866f903df46712c77ac6c654cd2c847d5d717a4dd5cb.dll,#1
  2⤵
  PID:2128