64fd7d96bb2c8755d617addf8196ab7665a92b749e8779632eebef17ec6051d1

Analysis

max time kernel
119s
max time network
121s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
30/09/2024, 00:32

Target

run_exe/lua51.dll
Size

447KB
MD5

d92adcfc23cb2f0c7c45b324ca105205
SHA1

787b9424f90e5c41b3ac6f9510f68999f65ee4c0
SHA256

4a365476d0fdbb412e30ade5aba8b5cb6dcf1799971a1147ffdf13f00276c424
SHA512

5cfa6397f474d40a42dffbb20681c436450f6d9ace61dabb9839867cc3425ae1cc41ea850bd8c67c6536ce805cebf2ddb534bee20b880231162e52bec6f408eb
SSDEEP

6144:orpfSN1l88pAViiJEwWcV3iQKvjRp5IzUJy7QnSnVDGX3XPsNskQC3a5akN7Z1zN:UpfQyiAdKvjdAU4UuFkYssq7+VM

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2720 wrote to memory of 2888	2720	rundll32.exe	30
PID 2720 wrote to memory of 2888	2720	rundll32.exe	30
PID 2720 wrote to memory of 2888	2720	rundll32.exe	30

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\run_exe\lua51.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2720
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2720 -s 80
  2⤵
  PID:2888