e1f5f78f744ddd0c1d9392ac2f19b1a7077ee27043a09355a60de06980fc4963

Analysis

max time kernel
15s
max time network
16s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
05/10/2024, 20:40

Target

Crack SoundPad _ By Burdix/UniteFxControl.dll
Size

1.1MB
MD5

6ac19cffc0c58ce35ae704c381c4f702
SHA1

c43900c5d56d62311a337b04c9489afc1c75c175
SHA256

afe6075ea7dd1bdcbc47b38385216d11cdd5ebc3f82eeedfa6d766e9249d6252
SHA512

61197228b9a1bb9810c68cc04928fd47e2bbe78d36f71c4a2ee498742fea8fd6c950cf43578fa20c6009f1ed6343bf8ca7bfb155512018aac88a4191fad4f939
SSDEEP

24576:XBLW5gqPvbSfiCRcXw0qU6RmWByuAy5a/owH/1:ZqPvbv/Zwm4yi5aQwHN

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3028 wrote to memory of 2684	3028	rundll32.exe	30
PID 3028 wrote to memory of 2684	3028	rundll32.exe	30
PID 3028 wrote to memory of 2684	3028	rundll32.exe	30

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Crack SoundPad _ By Burdix\UniteFxControl.dll",#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3028
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 3028 -s 164
  2⤵
  PID:2684