34e141c88f20dffe25bf118a427415ce55cbc123848a2f6d2d5ccfe390a746ec

Analysis

max time kernel
144s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
22-07-2024 18:26

Target

Wave/CrackedWave/chrome_elf.dll
Size

1020KB
MD5

7191d97ce7886a1a93a013e90868db96
SHA1

52dd736cb589dd1def87130893d6b9449a6a36e3
SHA256

32f925f833aa59e3f05322549fc3c326ac6fc604358f4efbf94c59d5c08b8dc6
SHA512

38ebb62c34d466935eabb157197c7c364d4345f22aa3b2641b636196ca1aeaa2152ac75d613ff90817cb94825189612ddd12fb96df29469511a46a7d9620e724
SSDEEP

12288:5iQwqdp5JyuHjLLvSWaaLjqSPSN9bcWiZ5J+l6UequWRz2n:5i5YIub1a8qSPSNOld4d

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3496 wrote to memory of 1820	3496	rundll32.exe	85
PID 3496 wrote to memory of 1820	3496	rundll32.exe	85
PID 3496 wrote to memory of 1820	3496	rundll32.exe	85

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Wave\CrackedWave\chrome_elf.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3496
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\Wave\CrackedWave\chrome_elf.dll,#1
  2⤵
  PID:1820