205fdfcaaf65ee26deee8894fc0fee984fb627defca2ab27056abe96fc98a8da

Analysis

max time kernel
19s
max time network
16s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
21/07/2024, 05:46

Target

74b6a311b1289808993133afb9441ed0N.dll
Size

7KB
MD5

74b6a311b1289808993133afb9441ed0
SHA1

b60eb0fe58b6c4d57483e401b42cca24d9c8cabc
SHA256

205fdfcaaf65ee26deee8894fc0fee984fb627defca2ab27056abe96fc98a8da
SHA512

b1101de36e7e0dc969a6302045f98cd549e4fa87f844ad44566e1c14ae45d18a1444124ce89f88f6cf966f8e8eba3d121821b4f76ef979347c4157c0f997ccd6
SSDEEP

96:DixZjmjtjd8jPjcZGR5TI1L6nhV1wcQ9JRp8NTb64oV4I7t9xJ84BsyZ0dquAnly:unSR6bgYsL65q9JRGiV4C3+yOol

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2292 wrote to memory of 2904	2292	rundll32.exe	28
PID 2292 wrote to memory of 2904	2292	rundll32.exe	28
PID 2292 wrote to memory of 2904	2292	rundll32.exe	28
PID 2292 wrote to memory of 2904	2292	rundll32.exe	28
PID 2292 wrote to memory of 2904	2292	rundll32.exe	28
PID 2292 wrote to memory of 2904	2292	rundll32.exe	28
PID 2292 wrote to memory of 2904	2292	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\74b6a311b1289808993133afb9441ed0N.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2292
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\74b6a311b1289808993133afb9441ed0N.dll,#1
  2⤵
  PID:2904