8923c4500259756ad748a9600edddb7d2efd082eaefc05a2cbdb1139338723b6

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
09-10-2024 15:43

Target

8923c4500259756ad748a9600edddb7d2efd082eaefc05a2cbdb1139338723b6N.dll
Size

153KB
MD5

f5efc8f00bedde3e49c423f415beac20
SHA1

89bde6488a9cd42d25407adffdcd1d41cbed84ba
SHA256

8923c4500259756ad748a9600edddb7d2efd082eaefc05a2cbdb1139338723b6
SHA512

440d37c62a1a8a76512ed463d6e9c91470fe6ea16f5eeea2330b060b2310f2da1a5b9caf7ab8e389abd05c201481f65eea0be2ae83497bcec6fdce2d910df8e4
SSDEEP

3072:+cxqLgL7FazOxL/DXz9Hxi79v6ZdVt6kU24+:5qkLBCODDD9Hxdg+

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2248 wrote to memory of 2748	2248	rundll32.exe	30
PID 2248 wrote to memory of 2748	2248	rundll32.exe	30
PID 2248 wrote to memory of 2748	2248	rundll32.exe	30

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\8923c4500259756ad748a9600edddb7d2efd082eaefc05a2cbdb1139338723b6N.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2248
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2248 -s 156
  2⤵
  PID:2748