3aef4883d4415fc5a763b01e087b299c706884543b02dc0eb927481ea037664b

Analysis

max time kernel
151s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
11/10/2022, 07:59

Target

3aef4883d4415fc5a763b01e087b299c706884543b02dc0eb927481ea037664b.exe
Size

72KB
MD5

6fa540311977f82f8f3d164e7d13abac
SHA1

2c0a1487249bd190b570238ecf1158faf00d5fd0
SHA256

3aef4883d4415fc5a763b01e087b299c706884543b02dc0eb927481ea037664b
SHA512

3fe8c8279f77759e8c7896568cd69bc6a01080cb76c505f0860f57b359f9e00375762e80d4a7e0a7a526848b07e5b73b6a6778996466f18ab33e654e913c2ab6
SSDEEP

1536:owhe7MT52OeHqCbMwV+/KwKkv1bGiQWYIf7qdNrJ:owK+52OeHBAwq8yCi5YB

Score

1^/10

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
4288	3aef4883d4415fc5a763b01e087b299c706884543b02dc0eb927481ea037664b.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 4288 wrote to memory of 1576	4288	3aef4883d4415fc5a763b01e087b299c706884543b02dc0eb927481ea037664b.exe	82
PID 4288 wrote to memory of 1576	4288	3aef4883d4415fc5a763b01e087b299c706884543b02dc0eb927481ea037664b.exe	82
PID 4288 wrote to memory of 1576	4288	3aef4883d4415fc5a763b01e087b299c706884543b02dc0eb927481ea037664b.exe	82
PID 4288 wrote to memory of 1576	4288	3aef4883d4415fc5a763b01e087b299c706884543b02dc0eb927481ea037664b.exe	82
PID 4288 wrote to memory of 1576	4288	3aef4883d4415fc5a763b01e087b299c706884543b02dc0eb927481ea037664b.exe	82
PID 4288 wrote to memory of 1576	4288	3aef4883d4415fc5a763b01e087b299c706884543b02dc0eb927481ea037664b.exe	82

memory/1576-134-0x0000000000EE0000-0x0000000000EEE000-memory.dmp

Filesize
56KB

Download
memory/1576-135-0x00000000009A0000-0x00000000009A9000-memory.dmp

Filesize
36KB

Download
memory/1576-136-0x00000000009A0000-0x00000000009A9000-memory.dmp

Filesize
36KB

Download
memory/4288-133-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download