34e141c88f20dffe25bf118a427415ce55cbc123848a2f6d2d5ccfe390a746ec

Analysis

max time kernel
147s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
22-07-2024 18:26

Target

Wave/CrackedWave/libcef.dll
Size

172.1MB
MD5

967dec6091ac3d9711a4d42b44e7f94d
SHA1

851f45fba8a521ef6e18db08449f100cdfe0e12c
SHA256

d0c2d48f10d7333d3ef27a88c75925d2ba2ccdfa3776a2167d7b2d6b764d44f1
SHA512

3c3da14c0cd22522efd6f068fe0c03de7e57cc3737050d1c396b162deedc037807769dd41959d3a8f79886c23f92759cfe035b220855ee6c4ea2c59c9b80b9dc
SSDEEP

1572864:0ZtQpYZYIf6OlbFndcIQ6/zYhWaQJ2k75nfI7Pmx1knbsHap/mKAh6pVwThrBRcc:0Ziw/kvwO9WDq4Icv2tZFVvwbnyQ

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2684 wrote to memory of 2980	2684	rundll32.exe	85
PID 2684 wrote to memory of 2980	2684	rundll32.exe	85
PID 2684 wrote to memory of 2980	2684	rundll32.exe	85

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Wave\CrackedWave\libcef.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2684
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\Wave\CrackedWave\libcef.dll,#1
  2⤵
  PID:2980