acb4464c86b943e6626708dda4e36ab0e44131f5f76f44c36463492f86e995dc

Analysis

max time kernel
122s
max time network
141s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
29/09/2024, 21:33

Target

SilverBullet/x64/CefSharp.BrowserSubprocess.Core.dll
Size

1.2MB
MD5

a7ea64a13017c8f73fa2a58b94ab96fa
SHA1

6e3d2314cbbac568c138fa0fed9cd631f5566022
SHA256

49b5e947cb19a3077a009448626271e43a2c179c98a52eb75be6089d05bba4ff
SHA512

92c4838a7b8be00ef9bbd1deb4e39ee6615c31dbdfcf6d7b8a3851e7eb57c736d5a799cf2c4c0bff23367880cf2def864ab47b65f3f63ac6dbe035d2e9907a25
SSDEEP

24576:Gh0BYCERE6tV+YKc8zXoiYehQspQ8SdWHubiWycvrQK0OXPzExy:PizRztVtKc8zXoiYehQspQ8SdWHubiWn

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2300 wrote to memory of 1996	2300	rundll32.exe	31
PID 2300 wrote to memory of 1996	2300	rundll32.exe	31
PID 2300 wrote to memory of 1996	2300	rundll32.exe	31

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\SilverBullet\x64\CefSharp.BrowserSubprocess.Core.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2300
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2300 -s 756
  2⤵
  PID:1996

memory/2300-0-0x000000001B4F0000-0x000000001B62A000-memory.dmp

Filesize
1.2MB

Download