f1b7a6af4fb6446b52909642596ebf1d913d54d4534fd3a5dcba88206af6468b

Analysis

max time kernel
20s
max time network
17s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
14/07/2024, 22:33

Target

32a6acee5ad25d02dc9824e1cb2b8440N.dll
Size

5KB
MD5

32a6acee5ad25d02dc9824e1cb2b8440
SHA1

e9b13075286250f166a97df1f68670013a36d678
SHA256

f1b7a6af4fb6446b52909642596ebf1d913d54d4534fd3a5dcba88206af6468b
SHA512

9ba4b42bc100ca2ec13d8a89101ed9bf6308e6485f8ffa3f30e8b3f9ae2b898ec1ac65978c5eac52ca30903953ba57b787c19c7ae5abc3dced5ce0d8a53a59bc
SSDEEP

48:CCy86+Wet9Q/iooHeiefhe+/lSMYEqZJ7fbNTedB+jtDxS06Hm8u7V/ZqK8CuI9S:hy859x0P8MaDfbYCF6HFEV/wRXI93a1

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 1824 wrote to memory of 2240	1824	rundll32.exe	30
PID 1824 wrote to memory of 2240	1824	rundll32.exe	30
PID 1824 wrote to memory of 2240	1824	rundll32.exe	30
PID 1824 wrote to memory of 2240	1824	rundll32.exe	30
PID 1824 wrote to memory of 2240	1824	rundll32.exe	30
PID 1824 wrote to memory of 2240	1824	rundll32.exe	30
PID 1824 wrote to memory of 2240	1824	rundll32.exe	30

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\32a6acee5ad25d02dc9824e1cb2b8440N.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1824
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\32a6acee5ad25d02dc9824e1cb2b8440N.dll,#1
  2⤵
  PID:2240