34e98119e92292ce1547640c8397049cd70e60f9d08a7d768d0b3f441498514d

Analysis

max time kernel
10s
max time network
19s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
13/07/2024, 06:14

Target

url_launcher_windows_plugin.dll
Size

92KB
MD5

3fa6611c893ad2475c762c2c1f6b6f1a
SHA1

eefd68c88434313fa277bc2f8079cb3786309a57
SHA256

2ac1e6ac16ce55c7bb57502bb1445cf83ea4c5bc310138154428ea2746126999
SHA512

fd77f9e7a00c5af6a30f499d7540eb6f37cdded293e7a12e4beb33309fc0ddbb754d087827a41d23a261ce50566550bdff89d5429f3eb102116d4fce3991bf4b
SSDEEP

1536:DDb3dBYnaTP5ixDXEdOk99sVwCtLpL0lHBV8Pl4sA22rjHmQ:nb3BTPMbQOk3srtLpL0lHBV8PlH12j3

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1932 wrote to memory of 1660	1932	rundll32.exe	30
PID 1932 wrote to memory of 1660	1932	rundll32.exe	30
PID 1932 wrote to memory of 1660	1932	rundll32.exe	30

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\url_launcher_windows_plugin.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1932
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 1932 -s 232
  2⤵
  PID:1660