b7ab101b58adb47c398b70811f5a03637afc77825593cce9957cc18e4c5742f6

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
14-07-2024 09:42

Target

b7ab101b58adb47c398b70811f5a03637afc77825593cce9957cc18e4c5742f6.dll
Size

2.7MB
MD5

b67c8a390d0e4386d014fb5a57b6a4c7
SHA1

20785c981ad76b353e707e9a5383b9a739fbdee1
SHA256

b7ab101b58adb47c398b70811f5a03637afc77825593cce9957cc18e4c5742f6
SHA512

2853eee847585318473f24ba7dae4f3e0f4972f1f458d48ac11daf68f6aba268e3fb92bfe3621fa1a81c01664f12298a522d361678343da9c6da343ecd24fffe
SSDEEP

49152:UU+ThQY8b0W+FzBuWzK77f0c4kxgCF6ftdRvMNtyXh:U/2YM0Wk9T0LKkx361jEDyx

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2160 wrote to memory of 2240	2160	rundll32.exe	28
PID 2160 wrote to memory of 2240	2160	rundll32.exe	28
PID 2160 wrote to memory of 2240	2160	rundll32.exe	28
PID 2160 wrote to memory of 2240	2160	rundll32.exe	28
PID 2160 wrote to memory of 2240	2160	rundll32.exe	28
PID 2160 wrote to memory of 2240	2160	rundll32.exe	28
PID 2160 wrote to memory of 2240	2160	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\b7ab101b58adb47c398b70811f5a03637afc77825593cce9957cc18e4c5742f6.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2160
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\b7ab101b58adb47c398b70811f5a03637afc77825593cce9957cc18e4c5742f6.dll,#1
  2⤵
  PID:2240

memory/2240-1-0x00000000000C0000-0x00000000000C6000-memory.dmp

Filesize
24KB

Download
memory/2240-0-0x0000000010000000-0x00000000102B1000-memory.dmp

Filesize
2.7MB

Download
memory/2240-3-0x0000000000360000-0x0000000000467000-memory.dmp

Filesize
1.0MB

Download
memory/2240-4-0x0000000000A10000-0x0000000000AFC000-memory.dmp

Filesize
944KB

Download
memory/2240-7-0x0000000000A10000-0x0000000000AFC000-memory.dmp

Filesize
944KB

Download
memory/2240-8-0x0000000010000000-0x00000000102B1000-memory.dmp

Filesize
2.7MB

Download
memory/2240-9-0x0000000000A10000-0x0000000000AFC000-memory.dmp

Filesize
944KB

Download
memory/2240-10-0x0000000002630000-0x00000000032CB000-memory.dmp

Filesize
12.6MB

Download
memory/2240-11-0x00000000021E0000-0x00000000022C0000-memory.dmp

Filesize
896KB

Download
memory/2240-12-0x00000000032D0000-0x00000000033B4000-memory.dmp

Filesize
912KB

Download
memory/2240-15-0x00000000032D0000-0x00000000033B4000-memory.dmp

Filesize
912KB

Download
memory/2240-16-0x00000000000F0000-0x00000000000F2000-memory.dmp

Filesize
8KB

Download
memory/2240-17-0x000000005C530000-0x000000005C534000-memory.dmp

Filesize
16KB

Download