219283dab871eff3793495ca136d0b0e2196c1c130dcce9e4232aca92c625a0f

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
15/07/2024, 03:47

Target

d3dx10_33.dll
Size

433KB
MD5

37a8171accf46a9c196054066c28827f
SHA1

886264510372602c2ee0193c5a185d719a61316a
SHA256

b04e2b089656eae01a0071359f9d7fb040dea804c1b9d2379431864174259c2d
SHA512

713b843a35dcfc32caa67c52ce0a32af6f54dfc4c11615d32613017aeeb257fb3f9168443a4288c71209e5d40f2e1b281febcbae6da076d2b57cf01aa3cd78b2
SSDEEP

6144:1Ve3sZJUM2iyD5M+g0ecSorz+yOgvQeeaQeeSQeesQeeWEQeehQeesjfOL5CpZIf:1k32ex/K+gzQrz+HHL5CI4z7y

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3768 wrote to memory of 4572	3768	rundll32.exe	83
PID 3768 wrote to memory of 4572	3768	rundll32.exe	83
PID 3768 wrote to memory of 4572	3768	rundll32.exe	83

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\d3dx10_33.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3768
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\d3dx10_33.dll,#1
  2⤵
  PID:4572