3ec8bc64f586979417849f0ff2dcd849f30eeece2bd106c1526960e26327d359

Analysis

max time kernel
11s
max time network
19s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
06-09-2024 23:00

Target

FurMark_win64/gpumagick_sdk_x64.dll
Size

842KB
MD5

875c52803d4ef7a716c1475ac6229d02
SHA1

df9719ac6375d65a1594e96414b6dd70c1da54bd
SHA256

d883c142966d235b307913cca2d30e245f35891ac7ae38d8dd31d56f4db48288
SHA512

6f43ac1c0748c5397a94ba0481aab063c93fdce726fef14038556151c47d4fb13c3da902d9070fa7e25ffaaf19f35e175c1fdf90558a991800a4e85ae9fb86f5
SSDEEP

12288:yOWbJxr6dNBzFxJqy/48XvU/fTyZ6P8uP6IidCA3pspI8u3:OxYNBzFDU3pP8uP6IidCA3pspru

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2436	rundll32.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2436 wrote to memory of 2888	2436	rundll32.exe	29
PID 2436 wrote to memory of 2888	2436	rundll32.exe	29
PID 2436 wrote to memory of 2888	2436	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\FurMark_win64\gpumagick_sdk_x64.dll,#1
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2436
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2436 -s 196
  2⤵
  PID:2888

memory/2436-0-0x000007FEF5BF0000-0x000007FEF6011000-memory.dmp

Filesize
4.1MB

Download