de2546c9abfb581a21039ea129cf0faad504d96d94c0f7a553427243f5f10451

Analysis

max time kernel
103s
max time network
104s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
20/07/2024, 08:01

Target

6ae2bc18caff265a6d0fea8fa69ec4e0N.dll
Size

6KB
MD5

6ae2bc18caff265a6d0fea8fa69ec4e0
SHA1

cdf91812d0657359687d98f0a80e4cb79d5f8207
SHA256

de2546c9abfb581a21039ea129cf0faad504d96d94c0f7a553427243f5f10451
SHA512

1af62ec020a4a3efac265b4f203c02ae6d94a23a1b2ca82ebc5714c7aff3f1ded0130a766324493ad4788b5ab2b6ea436171beb50e471805ba538569fc98f04a
SSDEEP

96:DixZjmjtjd8jPjcZGR5TIR+cmUVZwQJyq1K29FnBjBL6SaOE:unSR6bgYwCWZwQNnXxaOE

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1268 wrote to memory of 1004	1268	rundll32.exe	84
PID 1268 wrote to memory of 1004	1268	rundll32.exe	84
PID 1268 wrote to memory of 1004	1268	rundll32.exe	84

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6ae2bc18caff265a6d0fea8fa69ec4e0N.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1268
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6ae2bc18caff265a6d0fea8fa69ec4e0N.dll,#1
  2⤵
  PID:1004