acb4464c86b943e6626708dda4e36ab0e44131f5f76f44c36463492f86e995dc

Analysis

max time kernel
120s
max time network
137s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
29/09/2024, 21:33

Target

SilverBullet/x64/CefSharp.Core.dll
Size

1.8MB
MD5

f286552c2ff0dd6070df1d0c27e7c115
SHA1

daa9510222c0aedc738153121d16b4b7b8c1a727
SHA256

8b06fcf7f377f8e6eb8e27ae7025ce3562f9a2f7e83d5e2daed17aa6016d5088
SHA512

c8dc7c6c6341c7134d212b59a4cd4d5e41bb69e97e65f65db34598617f1c8a4008e32814d68cda6521d3d2f1a5ce326108d08bcc74b48a0f57b18fa64f030c22
SSDEEP

49152:a6tJ0r+E7+KNqcfUhPolDexla9e6dhkOiFnKA++e6P4ZcVQm6U5IrQK0O9kC62gN:aQY

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2192 wrote to memory of 2732	2192	rundll32.exe	30
PID 2192 wrote to memory of 2732	2192	rundll32.exe	30
PID 2192 wrote to memory of 2732	2192	rundll32.exe	30

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\SilverBullet\x64\CefSharp.Core.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2192
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2192 -s 768
  2⤵
  PID:2732

memory/2192-0-0x000000001B5F0000-0x000000001B7D2000-memory.dmp

Filesize
1.9MB

Download