acb4464c86b943e6626708dda4e36ab0e44131f5f76f44c36463492f86e995dc

Analysis

max time kernel
118s
max time network
134s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
29/09/2024, 21:33

Target

SilverBullet/x64/liblept1753.dll
Size

3.6MB
MD5

17661cd8e05ebfd0e6aa69ab0cfcbe1e
SHA1

e4273963fde72fcd315ae75aab2fa704eced93a4
SHA256

b88c5c4eb525a0b1db33afa8eb10b0a00d8c31fb9d609ed7a46e9671d056862d
SHA512

4b19a6457946acb5312852ef8771e390eb11aace710503db0ca4069939245adf667a5f87af02810131ed2158a5212e650360ea4ac17ecf160d6ffb6205f3174c
SSDEEP

49152:WxRio1qv4bsO1YYFtR5Qp9Fb2ClMuO+MfWx+Ma+G+u7U8T/u7ecYGtXI/JkvZ2iS:WxcndGPoVz95S

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2436 wrote to memory of 2284	2436	rundll32.exe	31
PID 2436 wrote to memory of 2284	2436	rundll32.exe	31
PID 2436 wrote to memory of 2284	2436	rundll32.exe	31

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\SilverBullet\x64\liblept1753.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2436
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2436 -s 80
  2⤵
  PID:2284