9b0d16828b834ea994fa4940a4b15cde16b905e38132e074ad0fa2d506487c37

Analysis

max time kernel
97s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
02/10/2022, 15:22

Target

9b0d16828b834ea994fa4940a4b15cde16b905e38132e074ad0fa2d506487c37.exe
Size

75KB
MD5

70c24a7351d0d71d02649998029fb0a9
SHA1

12112fae07a4bc77625b35610bfce3a8491cf026
SHA256

9b0d16828b834ea994fa4940a4b15cde16b905e38132e074ad0fa2d506487c37
SHA512

e7546b4c8c6485c0a6d624506b7ad469e1dda8b46a22b1bdb014a65dd3bd5d5f9dd74a05bcc287e718e93894b9e5f555efd63f16434cbae468eea4e665b9daaa
SSDEEP

768:PUjKVjl9xw3x6nz7vj1wrb51bcgBH5T9Zztj7CzrWBF564w5X7wIKHLbRDjjMnpG:PUKJ3zzj1wxmg5Tf9u8F564Kwt+no++

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 3036 wrote to memory of 3060	3036	9b0d16828b834ea994fa4940a4b15cde16b905e38132e074ad0fa2d506487c37.exe	62
PID 3036 wrote to memory of 3060	3036	9b0d16828b834ea994fa4940a4b15cde16b905e38132e074ad0fa2d506487c37.exe	62
PID 3036 wrote to memory of 3060	3036	9b0d16828b834ea994fa4940a4b15cde16b905e38132e074ad0fa2d506487c37.exe	62
PID 3036 wrote to memory of 3060	3036	9b0d16828b834ea994fa4940a4b15cde16b905e38132e074ad0fa2d506487c37.exe	62
PID 3036 wrote to memory of 3060	3036	9b0d16828b834ea994fa4940a4b15cde16b905e38132e074ad0fa2d506487c37.exe	62
PID 3036 wrote to memory of 3060	3036	9b0d16828b834ea994fa4940a4b15cde16b905e38132e074ad0fa2d506487c37.exe	62

memory/3036-132-0x0000000000400000-0x000000000040F000-memory.dmp

Filesize
60KB

Download
memory/3036-133-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download
memory/3036-135-0x0000000000400000-0x000000000040F000-memory.dmp

Filesize
60KB

Download
memory/3060-134-0x000000007FFC0000-0x000000007FFC6000-memory.dmp

Filesize
24KB

Download