b142e47b0b57e805e80ecf42d39b87e1564100d8cd27a9d32d8840d824969111

Analysis

max time kernel
47s
max time network
52s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
02-10-2022 15:19

Target

b142e47b0b57e805e80ecf42d39b87e1564100d8cd27a9d32d8840d824969111.exe
Size

31KB
MD5

5af06461833e3649b418191d23844476
SHA1

6d6eab8174eb4e02fff4081ec5761619cd4e0814
SHA256

b142e47b0b57e805e80ecf42d39b87e1564100d8cd27a9d32d8840d824969111
SHA512

2e251e1ca552e4f37d578ab003bba9269ebee6813c46133b52c01d7aa7ab2d6f258bf5eb2610f0376064e7a4197b5daa51ba4746f2c66af9ed6aa95d7eb7f7e1
SSDEEP

768:Z+h7TzTBziifTeiZSVWihwEknh0L7OTLeNfQf/J:kZ/nEkh8OTKNyJ

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
960	b142e47b0b57e805e80ecf42d39b87e1564100d8cd27a9d32d8840d824969111.exe
960	b142e47b0b57e805e80ecf42d39b87e1564100d8cd27a9d32d8840d824969111.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 960 wrote to memory of 1220	960	b142e47b0b57e805e80ecf42d39b87e1564100d8cd27a9d32d8840d824969111.exe	20
PID 960 wrote to memory of 1220	960	b142e47b0b57e805e80ecf42d39b87e1564100d8cd27a9d32d8840d824969111.exe	20
PID 960 wrote to memory of 1220	960	b142e47b0b57e805e80ecf42d39b87e1564100d8cd27a9d32d8840d824969111.exe	20
PID 960 wrote to memory of 1220	960	b142e47b0b57e805e80ecf42d39b87e1564100d8cd27a9d32d8840d824969111.exe	20

memory/960-54-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/960-55-0x00000000757A1000-0x00000000757A3000-memory.dmp

Filesize
8KB

Download
memory/960-59-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/960-60-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1220-56-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download