8fe2fe311c62bba63eb9ce6b06073e719ab348c014f4ba57926224494cbeb1b7

Analysis

max time kernel
96s
max time network
97s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
16/07/2024, 00:12

Target

34b8b2ac2079df745a18a92e9b5ccc70N.dll
Size

4.7MB
MD5

34b8b2ac2079df745a18a92e9b5ccc70
SHA1

517dc9bb95d6a8863d676579cf8f6b5bb3aa1f82
SHA256

8fe2fe311c62bba63eb9ce6b06073e719ab348c014f4ba57926224494cbeb1b7
SHA512

066aa31e558117e9fabd3c1f0149eec844e3067a3524635ed02a60cc365aaad6819aaf3df24dc63b0b4068af75d346f2c658dca489ede56f4b93e039feb91a43
SSDEEP

98304:XfKvdjBBRLhaAfvgQHWyQLAFdH8zsgI9ElpG6XVLM/22wBGp68NjriBL3If:vKvdjdL1vxWyQLmdcIzmlpGYoyopRKLK

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2688 wrote to memory of 4680	2688	rundll32.exe	84
PID 2688 wrote to memory of 4680	2688	rundll32.exe	84
PID 2688 wrote to memory of 4680	2688	rundll32.exe	84

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\34b8b2ac2079df745a18a92e9b5ccc70N.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2688
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\34b8b2ac2079df745a18a92e9b5ccc70N.dll,#1
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4680

memory/4680-0-0x0000000074CCD000-0x0000000074F4F000-memory.dmp

Filesize
2.5MB

Download
memory/4680-2-0x0000000074CB0000-0x00000000753F8000-memory.dmp

Filesize
7.3MB

Download
memory/4680-5-0x0000000074CB0000-0x00000000753F8000-memory.dmp

Filesize
7.3MB

Download
memory/4680-1-0x0000000001580000-0x0000000001581000-memory.dmp

Filesize
4KB

Download
memory/4680-6-0x0000000074CB0000-0x00000000753F8000-memory.dmp

Filesize
7.3MB

Download
memory/4680-7-0x0000000074CCD000-0x0000000074F4F000-memory.dmp

Filesize
2.5MB

Download
memory/4680-8-0x0000000074CB0000-0x00000000753F8000-memory.dmp

Filesize
7.3MB

Download