5bb01fddeab37d40950557a434ccb152d2d6aa10bc594dbda467d58df7222ced

Analysis

max time kernel
91s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
19/09/2022, 05:29

Target

5bb01fddeab37d40950557a434ccb152d2d6aa10bc594dbda467d58df7222ced.exe
Size

156KB
MD5

04a773759b0bd2874f9d37bc82f630b4
SHA1

b0861b7283e797e00ddfca0c48f39e01c06b9e7c
SHA256

5bb01fddeab37d40950557a434ccb152d2d6aa10bc594dbda467d58df7222ced
SHA512

830c9f40051e1ff3353ff9069b0d6d447c9c30e3c9623ac4fca1614991fb26d2ae89b70a6014159821b346eef3a31620232b287a549bdd5566172b679e908538
SSDEEP

3072:m3Co9d8+vMFp8cp3KaVMcv7lzzatYNMCvCXoQDt5:vojc8aacvBfaIG5

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4444 wrote to memory of 4504	4444	5bb01fddeab37d40950557a434ccb152d2d6aa10bc594dbda467d58df7222ced.exe	78
PID 4444 wrote to memory of 4504	4444	5bb01fddeab37d40950557a434ccb152d2d6aa10bc594dbda467d58df7222ced.exe	78
PID 4444 wrote to memory of 4504	4444	5bb01fddeab37d40950557a434ccb152d2d6aa10bc594dbda467d58df7222ced.exe	78

C:\Users\Admin\AppData\Local\Temp\5bb01fddeab37d40950557a434ccb152d2d6aa10bc594dbda467d58df7222ced.exe
"C:\Users\Admin\AppData\Local\Temp\5bb01fddeab37d40950557a434ccb152d2d6aa10bc594dbda467d58df7222ced.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4444
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sdfkb.bat
  2⤵
  PID:4504

C:\Users\Admin\AppData\Local\Temp\sdfkb.bat

Filesize
516B

MD5
6dee7687966fcf67bda9cb60e42cdbc7

SHA1
04d804f7437aabe7248931a64825abeff41bebfe

SHA256
4d2d3e19569117be012c03f9a3c64cbfb4263df6252cb96600e55aa1f59a5f43

SHA512
ec417b7ff65a8fdbf5691b0e28175ab8e96450334b37e9d729cf38afff990c161970cb589adfe883bebc3aaf485fad274579754a3900650f1327cd8ec6d57233

Download Submit
C:\Users\Admin\AppData\Local\Temp\sdfkb~.tmp

Filesize
156KB

MD5
e2366c8d07f37cd8c46a8e8c416961f4

SHA1
93abbd0cbd628232fa82b28a5182f1fb2ab98804

SHA256
9f1baddf7e51bc7688074c2c1545a930b4b09ff9f43a143d3f560d3ea526d0ac

SHA512
4c96017153c237bd091ff937ee29167b3700f4ab0c33b33e96f25e53d10e90a4122789e736353e855b76a865b57e5bbf53d03887663acdb210c65622cf5f1f6d

Download Submit