2ca27613a9c3eeb7ca613ab133f4598e41e9b05648e1151e40416ed24bd6db5a

Analysis

max time kernel
85s
max time network
129s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
19/09/2022, 18:50

Target

2ca27613a9c3eeb7ca613ab133f4598e41e9b05648e1151e40416ed24bd6db5a.exe
Size

300KB
MD5

c44bfa414a5cb3f3f4d266f1291f0ed0
SHA1

bdaafce79a8fdeee7300b4f0c2001f6c66d6f47e
SHA256

2ca27613a9c3eeb7ca613ab133f4598e41e9b05648e1151e40416ed24bd6db5a
SHA512

cf8f4a915b3cb7248326f5ce56791ad1723452c716cf38ab5a10c1b52cc04b952fbe91deb7725dd56318e5938dfa17bbb04fee9d8bf1aa0d1fde5043dd5e0963
SSDEEP

6144:Ky+IeCZc08uF3KGCMwrtm9JYcsIhVr2KEo0gwSqgcWacUvQYjxHLg+lIfJ1yu:F+XCVx/j5xr2K4geFnlY9

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4788 wrote to memory of 4528	4788	2ca27613a9c3eeb7ca613ab133f4598e41e9b05648e1151e40416ed24bd6db5a.exe	86
PID 4788 wrote to memory of 4528	4788	2ca27613a9c3eeb7ca613ab133f4598e41e9b05648e1151e40416ed24bd6db5a.exe	86
PID 4788 wrote to memory of 4528	4788	2ca27613a9c3eeb7ca613ab133f4598e41e9b05648e1151e40416ed24bd6db5a.exe	86

C:\Users\Admin\AppData\Local\Temp\2ca27613a9c3eeb7ca613ab133f4598e41e9b05648e1151e40416ed24bd6db5a.exe
"C:\Users\Admin\AppData\Local\Temp\2ca27613a9c3eeb7ca613ab133f4598e41e9b05648e1151e40416ed24bd6db5a.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4788
- C:\Users\Admin\AppData\Local\Temp\2ca27613a9c3eeb7ca613ab133f4598e41e9b05648e1151e40416ed24bd6db5a.exe
  "C:\Users\Admin\AppData\Local\Temp\2ca27613a9c3eeb7ca613ab133f4598e41e9b05648e1151e40416ed24bd6db5a.exe"
  2⤵
  PID:4528

memory/4788-132-0x0000000000C10000-0x0000000000C5F000-memory.dmp

Filesize
316KB

Download
memory/4788-134-0x0000000000C10000-0x0000000000C5F000-memory.dmp

Filesize
316KB

Download