Analysis
- max time kernel
137s - max time network
120s - platform
windows10_x64 - resource
win10v20201028 - submitted
09/11/2020, 20:58
Static task
static1
Behavioral task
behavioral1
Sample
Fedex85520.exe
Resource
win7v20201028
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Fedex85520.exe
Resource
win10v20201028
windows10_x64
0 signatures
0 seconds
General
- Target Fedex85520.exe
- Size 982KB
- Sample201109-2mzfktyb4s
- SHA256 a7b2c2dfcb01c3c3b3dc945f3b8d1c907a4de8aba291241466a9da4c69492a29
- MD5 e18a27c28946a96a8503049ea1cb36c4
- SHA1 0eec37c935d347037108baeeb90033f843477d31
- SHA512 7fec5096a95a60714677dfe65876ced387b0982b3061563157e3e2f9d5fdd245a2f22eda5d115945939a2ccf58bbeda474d6e0e7cb3702f0ba910348f664e939
- MD5 SHA1 SHA512
Score
10/10
Malware Config
Signatures
- ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
- ModiLoader First Stage 3 IoCs
resource yara_rule behavioral2/files/0x000300000001ab85-4.dat modiloader_stage1 behavioral2/files/0x000300000001ab85-3.dat modiloader_stage1 behavioral2/files/0x000300000001ab85-8.dat modiloader_stage1 - Executes dropped EXE 2 IoCs
pid Process 184 Tiqavjs.exe 2696 Tiqavjs.exe - Suspicious use of WriteProcessMemory 431 IoCs
description pid Process procid_target PID 640 wrote to memory of 184 640 Fedex85520.exe 75 PID 640 wrote to memory of 184 640 Fedex85520.exe 75 PID 640 wrote to memory of 184 640 Fedex85520.exe 75 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77 PID 184 wrote to memory of 2696 184 Tiqavjs.exe 77
Processes
-
C:\Users\Admin\AppData\Local\Temp\Fedex85520.exe"C:\Users\Admin\AppData\Local\Temp\Fedex85520.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:640 -
C:\Users\Admin\AppData\Local\Temp\Tiqavjs.exe"C:\Users\Admin\AppData\Local\Temp\Tiqavjs.exe"2⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:184 -
C:\Users\Admin\AppData\Local\Temp\Tiqavjs.exe"C:\Users\Admin\AppData\Local\Temp\Tiqavjs.exe"3⤵
- Executes dropped EXE
PID:2696
-
-