60f61b74d0cebab0fabcf35eece6f89147a07830b11993163be5ebd6e350d336

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
19/07/2024, 09:35

Target

7c748780c2503caa299921e978e446b0N.dll
Size

6KB
MD5

7c748780c2503caa299921e978e446b0
SHA1

c1ab493c84b64d2cd685fc8542cb057c852b8a63
SHA256

60f61b74d0cebab0fabcf35eece6f89147a07830b11993163be5ebd6e350d336
SHA512

18671f090ed9faad58feda02d5db241d7501dd8edbb9055c571cf5d014a726783ec808a8ba3b68a36e5a44a615e51250028598f3d9bebc3a0dcabe130b969177
SSDEEP

96:nEY2RrF1eqwi4cXcJn2tPaszrYIG1fi7L9llprlwgMP5G:EHRh1eppcXcJ2TPPiq7xlNV

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2156 wrote to memory of 1972	2156	rundll32.exe	30
PID 2156 wrote to memory of 1972	2156	rundll32.exe	30
PID 2156 wrote to memory of 1972	2156	rundll32.exe	30
PID 2156 wrote to memory of 1972	2156	rundll32.exe	30
PID 2156 wrote to memory of 1972	2156	rundll32.exe	30
PID 2156 wrote to memory of 1972	2156	rundll32.exe	30
PID 2156 wrote to memory of 1972	2156	rundll32.exe	30

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\7c748780c2503caa299921e978e446b0N.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2156
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\7c748780c2503caa299921e978e446b0N.dll,#1
  2⤵
  PID:1972