6a09ec75075a0c16c5cd7b6fdd4b3e44623d4cfe66046cc3c13a229766796436

Analysis

max time kernel
133s
max time network
179s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
11/10/2022, 07:34

Target

6a09ec75075a0c16c5cd7b6fdd4b3e44623d4cfe66046cc3c13a229766796436.exe
Size

187KB
MD5

629570fcd68cd3596c8d08625f727c83
SHA1

8d0719642a737451e9a81fa28c352d7c801436cf
SHA256

6a09ec75075a0c16c5cd7b6fdd4b3e44623d4cfe66046cc3c13a229766796436
SHA512

7c524d154ce017375105a6551bab2340f570c16e596be093edfe51327741e8bf0e359e909c4dc0f08ff474ad19d6afbf2609149c66f66c0557f04d845af05f17
SSDEEP

3072:p+iQWEyvvm68GL2BaHS7ykvWdQSu0/ksJJSJGfU/Rl1GzCM99l:4Avm+L2Ba5kvWKSujo85GCM99

Score

1^/10

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
3968	6a09ec75075a0c16c5cd7b6fdd4b3e44623d4cfe66046cc3c13a229766796436.exe

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 3968 wrote to memory of 3708	3968	6a09ec75075a0c16c5cd7b6fdd4b3e44623d4cfe66046cc3c13a229766796436.exe	80
PID 3968 wrote to memory of 3708	3968	6a09ec75075a0c16c5cd7b6fdd4b3e44623d4cfe66046cc3c13a229766796436.exe	80
PID 3968 wrote to memory of 3708	3968	6a09ec75075a0c16c5cd7b6fdd4b3e44623d4cfe66046cc3c13a229766796436.exe	80
PID 3968 wrote to memory of 3708	3968	6a09ec75075a0c16c5cd7b6fdd4b3e44623d4cfe66046cc3c13a229766796436.exe	80
PID 3968 wrote to memory of 3708	3968	6a09ec75075a0c16c5cd7b6fdd4b3e44623d4cfe66046cc3c13a229766796436.exe	80

memory/3968-137-0x0000000000400000-0x000000000043D000-memory.dmp

Filesize
244KB

Download
memory/3968-136-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/3968-138-0x0000000000400000-0x000000000043D000-memory.dmp

Filesize
244KB

Download