Analysis
-
max time kernel
117s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
02-12-2024 16:25
General
-
Target
8411add8ba814509886e7ce5baee8e338f5955037623c768747cbc1b7ecc1de8.dll
-
Size
275KB
-
MD5
a143d675ff5ffc87cb7bc6b120abdac5
-
SHA1
5334fe952a26aca795456005003c19b037b22cc1
-
SHA256
8411add8ba814509886e7ce5baee8e338f5955037623c768747cbc1b7ecc1de8
-
SHA512
fdeb1d5050bd6064a2837220f8395a84ee60306ec28c55100fec26e9ff88442aac5a46234aa82905f01f9e1001994ededcc4e893150dda6223c68cdc33a08ce8
-
SSDEEP
6144:azdTTWyV4TosDLx4fYYIpjgsYQxTSOH8u+DRoowXOJNYYp:kdTTWyV43DLCwJEQF+GowXOJSY
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\8411add8ba814509886e7ce5baee8e338f5955037623c768747cbc1b7ecc1de8.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2788 -s 1482⤵
-