15fa5e861b7227897d08678d4725fc38595683eeb662d6d028236206839aa0b9

Analysis

max time kernel
181s
max time network
185s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
19/09/2022, 22:06

Target

15fa5e861b7227897d08678d4725fc38595683eeb662d6d028236206839aa0b9.exe
Size

91KB
MD5

ae790467e6ef18ad461b6a9a9d3b2ea8
SHA1

c8dea68858165d3b3f938dff70bfae44dc8834dc
SHA256

15fa5e861b7227897d08678d4725fc38595683eeb662d6d028236206839aa0b9
SHA512

4d541e320e8681fa45aeb6070342d45b8d2749dca340fe43b2ac279480db7cbed031c2832b86f327964991f6559a81e550e8b84d11e2efd0421b218c712b3e6d
SSDEEP

1536:d8UDwNrPPzPeDFvHLR3+X+YLGEdY9ufOMiHUsdYhDIUa/0LxMn0LJub2P3PHjYh8:dPMDLeDFfLh+X+qfOMi0vpacLxMO26/d

Score

1^/10

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
2920	15fa5e861b7227897d08678d4725fc38595683eeb662d6d028236206839aa0b9.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 2920 wrote to memory of 5068	2920	15fa5e861b7227897d08678d4725fc38595683eeb662d6d028236206839aa0b9.exe	80
PID 2920 wrote to memory of 5068	2920	15fa5e861b7227897d08678d4725fc38595683eeb662d6d028236206839aa0b9.exe	80
PID 2920 wrote to memory of 5068	2920	15fa5e861b7227897d08678d4725fc38595683eeb662d6d028236206839aa0b9.exe	80
PID 2920 wrote to memory of 5068	2920	15fa5e861b7227897d08678d4725fc38595683eeb662d6d028236206839aa0b9.exe	80
PID 2920 wrote to memory of 5068	2920	15fa5e861b7227897d08678d4725fc38595683eeb662d6d028236206839aa0b9.exe	80
PID 2920 wrote to memory of 5068	2920	15fa5e861b7227897d08678d4725fc38595683eeb662d6d028236206839aa0b9.exe	80

memory/2920-136-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/5068-137-0x0000000000C90000-0x0000000000C9E000-memory.dmp

Filesize
56KB

Download
memory/5068-138-0x00000000006D0000-0x00000000006D9000-memory.dmp

Filesize
36KB

Download