3a10dd7017daa4195a61e0b675b7fe88b620814e3763a7ded9e312c768224762

Analysis

max time kernel
119s
max time network
128s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
14/07/2024, 17:28

Target

ChartDllTwo.dll
Size

64KB
MD5

b43c8e1a25dfc5c8267cf69ed0e7e502
SHA1

4aac0fa981da0ee981217a2231bdcc11e002ce8f
SHA256

cfc2be2f56f27c39a52faf5b04933f72433187425cbde1c22b87c25b67ef7c28
SHA512

95fff3d03a22437485522303b2a7d07dea2f2f43fbcbc9f0df57bf81e4aefe01daecfc7f4c7ba6eeacfbdb3e2772ff656a1398575b7b49f9050d0752d24eaa19
SSDEEP

768:hVgpsiI8CNKKV+2ysC6buT+phli0fosbUnBhOJhTmtiB9Oe97JKaozlSA/noc1+H:wPI8EfH5uT+pjlosbUXYSm9M1tPoP

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2660 wrote to memory of 2680	2660	rundll32.exe	31
PID 2660 wrote to memory of 2680	2660	rundll32.exe	31
PID 2660 wrote to memory of 2680	2660	rundll32.exe	31
PID 2660 wrote to memory of 2680	2660	rundll32.exe	31
PID 2660 wrote to memory of 2680	2660	rundll32.exe	31
PID 2660 wrote to memory of 2680	2660	rundll32.exe	31
PID 2660 wrote to memory of 2680	2660	rundll32.exe	31

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\ChartDllTwo.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2660
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\ChartDllTwo.dll,#1
  2⤵
  PID:2680