bfaa0cc7a0136d108964c1f690a57341545f69daba171d2807f52b979ef96b85

Analysis

max time kernel
150s
max time network
144s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
02/10/2022, 12:24

Target

bfaa0cc7a0136d108964c1f690a57341545f69daba171d2807f52b979ef96b85.exe
Size

83KB
MD5

6e62f43bf3897a46bff45f2c5cef25b0
SHA1

727a4071426c94d8833452987103e49bd8d110e8
SHA256

bfaa0cc7a0136d108964c1f690a57341545f69daba171d2807f52b979ef96b85
SHA512

41a9ebd5e1a0ec72b566d4dfd9dbd2862258d45bbbb06b126c0432e06beb6a664b6ff764b4905a126bd9cf95437010d258f215bd409ede098f18c5146b9511d4
SSDEEP

1536:QKArY6BLoJth8XZNX6/kgHi1jNGfQ3vNSZqMXhR6FwORrBh/Ms:FijBG8X7X6/kgmNGI31IKdFBht

Score

1^/10

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
1872	bfaa0cc7a0136d108964c1f690a57341545f69daba171d2807f52b979ef96b85.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 1872 wrote to memory of 1992	1872	bfaa0cc7a0136d108964c1f690a57341545f69daba171d2807f52b979ef96b85.exe	27
PID 1872 wrote to memory of 1992	1872	bfaa0cc7a0136d108964c1f690a57341545f69daba171d2807f52b979ef96b85.exe	27
PID 1872 wrote to memory of 1992	1872	bfaa0cc7a0136d108964c1f690a57341545f69daba171d2807f52b979ef96b85.exe	27
PID 1872 wrote to memory of 1992	1872	bfaa0cc7a0136d108964c1f690a57341545f69daba171d2807f52b979ef96b85.exe	27
PID 1872 wrote to memory of 1992	1872	bfaa0cc7a0136d108964c1f690a57341545f69daba171d2807f52b979ef96b85.exe	27
PID 1872 wrote to memory of 1992	1872	bfaa0cc7a0136d108964c1f690a57341545f69daba171d2807f52b979ef96b85.exe	27
PID 1872 wrote to memory of 1992	1872	bfaa0cc7a0136d108964c1f690a57341545f69daba171d2807f52b979ef96b85.exe	27

memory/1872-54-0x0000000075571000-0x0000000075573000-memory.dmp

Filesize
8KB

Download
memory/1872-59-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/1992-55-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/1992-57-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/1992-60-0x0000000000E90000-0x0000000000E98000-memory.dmp

Filesize
32KB

Download
memory/1992-61-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download