60f61b74d0cebab0fabcf35eece6f89147a07830b11993163be5ebd6e350d336

Analysis

max time kernel
98s
max time network
98s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
19-07-2024 09:35

Target

7c748780c2503caa299921e978e446b0N.dll
Size

6KB
MD5

7c748780c2503caa299921e978e446b0
SHA1

c1ab493c84b64d2cd685fc8542cb057c852b8a63
SHA256

60f61b74d0cebab0fabcf35eece6f89147a07830b11993163be5ebd6e350d336
SHA512

18671f090ed9faad58feda02d5db241d7501dd8edbb9055c571cf5d014a726783ec808a8ba3b68a36e5a44a615e51250028598f3d9bebc3a0dcabe130b969177
SSDEEP

96:nEY2RrF1eqwi4cXcJn2tPaszrYIG1fi7L9llprlwgMP5G:EHRh1eppcXcJ2TPPiq7xlNV

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3548 wrote to memory of 4760	3548	rundll32.exe	84
PID 3548 wrote to memory of 4760	3548	rundll32.exe	84
PID 3548 wrote to memory of 4760	3548	rundll32.exe	84

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\7c748780c2503caa299921e978e446b0N.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3548
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\7c748780c2503caa299921e978e446b0N.dll,#1
  2⤵
  PID:4760