b11fa6b0699d9f9c43be01194e6383348ee504f78863454d26e048fe61397518

Analysis

max time kernel
117s
max time network
120s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
19/07/2024, 13:06

Target

MediaPlayer.dll
Size

549KB
MD5

acc2e7980870a844122dae290bb96e75
SHA1

49705dfc34c32005e11bbc96471c6d841586fcb1
SHA256

945f9a34c5efbc6e3711d6bf2b3cfd14b1ee89d70a6fa447c642696ff4a8dde9
SHA512

5f1245a7ce5de48414709cadb13f20e928a330f37f709ad893c0501cc64b87bdeb14978d824e37a3908a15cedf7c71e4fe5e47ff69ede7d353a723e0108dc05f
SSDEEP

12288:SrAVZQZXxuC0Cc4toFf6zHFZYrE8mpB4J9rBddRW+n4pg1Rca:Sr6cxgCc4SFi5ZHW5Bddw+n4/a

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2300	2468	WerFault.exe	30

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2272 wrote to memory of 2468	2272	rundll32.exe	30
PID 2272 wrote to memory of 2468	2272	rundll32.exe	30
PID 2272 wrote to memory of 2468	2272	rundll32.exe	30
PID 2272 wrote to memory of 2468	2272	rundll32.exe	30
PID 2272 wrote to memory of 2468	2272	rundll32.exe	30
PID 2272 wrote to memory of 2468	2272	rundll32.exe	30
PID 2272 wrote to memory of 2468	2272	rundll32.exe	30
PID 2468 wrote to memory of 2300	2468	rundll32.exe	32
PID 2468 wrote to memory of 2300	2468	rundll32.exe	32
PID 2468 wrote to memory of 2300	2468	rundll32.exe	32
PID 2468 wrote to memory of 2300	2468	rundll32.exe	32

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\MediaPlayer.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2272
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\MediaPlayer.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2468
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2468 -s 264
    3⤵
    - Program crash
    PID:2300

memory/2468-5-0x0000000001FC0000-0x00000000021DD000-memory.dmp

Filesize
2.1MB

Download
memory/2468-7-0x00000000021CC000-0x00000000021CE000-memory.dmp

Filesize
8KB

Download
memory/2468-3-0x0000000001FC0000-0x00000000021DD000-memory.dmp

Filesize
2.1MB

Download
memory/2468-2-0x0000000001FC0000-0x00000000021DD000-memory.dmp

Filesize
2.1MB

Download
memory/2468-1-0x0000000001FC0000-0x00000000021DD000-memory.dmp

Filesize
2.1MB

Download
memory/2468-0-0x0000000001FC0000-0x00000000021DD000-memory.dmp

Filesize
2.1MB

Download
memory/2468-8-0x0000000001FC0000-0x00000000021DD000-memory.dmp

Filesize
2.1MB

Download