7a39caf04d025428d5d9e5098fef74e22f59eee2c3686f676e235ae954b18b6d

Resubmissions

10-02-2025 02:06

10-02-2025 02:04

max time kernel
119s
max time network
121s
platform
windows7_x64
resource
win7-20250207-en
resource tags

arch:x64arch:x86image:win7-20250207-enlocale:en-usos:windows7-x64system
submitted
10-02-2025 02:06

Target

icuuc68.dll
Size

2.1MB
MD5

95482a6a29f2d531732294b10f35a684
SHA1

7bf324f137d085d7ff5431df0d12208f42b8217b
SHA256

5f56fea8807d97052e8dfe3bb25baf7ad0200d7cb288a8b3e9aef4d8881367b8
SHA512

4f6abeb8a2227ab30ae9aaa131408d1f6d737f38a1f0ef1b691cd20c40b756fdafa94bcf5413f49bb251187166574d03601e809601b487d6327c407034e98bcd
SSDEEP

24576:LE4CsQBmuuq+7QJHOqHsEehOB1TTCbKJM9lo736S1GBAdtkjsyk3lIkkp1sTf9wY:4sQ9+qHOIBehOB4mulo736uGCrykVYlO

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1732 wrote to memory of 2412	1732	rundll32.exe	30
PID 1732 wrote to memory of 2412	1732	rundll32.exe	30
PID 1732 wrote to memory of 2412	1732	rundll32.exe	30

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\icuuc68.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1732
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 1732 -s 88
  2⤵
  PID:2412