b3b8baae3ca6b7d301d5bcd45859c6f00eef17bdd8b2ef1d7571b85d83fef4e4

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
19/07/2024, 11:46

Target

Wopti.v7.91.Build.9.115.By.MyCrack/D3DX81ab.dll
Size

333KB
MD5

bcff56f41e11f624d520cb390592b9bd
SHA1

76450720967bcb9131ac87349b344bef5a4000df
SHA256

f26f8877499bcc74327dbf5befc5940e75ac42464bdd567b7bd010d1b8db77f1
SHA512

9d07b5d32ca138d4ca4dbcee65003e4e399e90a1ee7a8d14fd64b303c00b409a1a3500234c6c8b5d0854258d7d97ed0dc07b597e34ff25212ad212e7697e8ae8
SSDEEP

6144:odn7KUO/dJTwFUN8Gtioi/0Y7f8GrA8KYrYWCVfBCIFZU2/7JlkJvg9A:qCJTjWGtLinUGrLeEIfktgS

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2324 wrote to memory of 2060	2324	rundll32.exe	31
PID 2324 wrote to memory of 2060	2324	rundll32.exe	31
PID 2324 wrote to memory of 2060	2324	rundll32.exe	31
PID 2324 wrote to memory of 2060	2324	rundll32.exe	31
PID 2324 wrote to memory of 2060	2324	rundll32.exe	31
PID 2324 wrote to memory of 2060	2324	rundll32.exe	31
PID 2324 wrote to memory of 2060	2324	rundll32.exe	31

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Wopti.v7.91.Build.9.115.By.MyCrack\D3DX81ab.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2324
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\Wopti.v7.91.Build.9.115.By.MyCrack\D3DX81ab.dll,#1
  2⤵
  PID:2060

memory/2060-0-0x0000000010000000-0x00000000100AD000-memory.dmp

Filesize
692KB

Download