622d00503f135d751f91a743db996843524ea687db490d922a5e94ea00384197

Analysis

max time kernel
47s
max time network
52s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
11/10/2022, 19:28

Target

622d00503f135d751f91a743db996843524ea687db490d922a5e94ea00384197.exe
Size

29KB
MD5

63253f483a5a6b38e039e8f24dd584af
SHA1

26d008132597559d294edcb511f08830fa48dd38
SHA256

622d00503f135d751f91a743db996843524ea687db490d922a5e94ea00384197
SHA512

007e808f8922945280c75dc1e641e49b2156b84ef86dabe03c8a391b02e43dfde2d94846caa9818ad22dce64a1ea6ffb7030f74ca6ac34f0cdbc7abb7d90a74d
SSDEEP

768:geLMhlzjRKiQWgdgmWhtaHxNZbR3Xe9lZ3Fkf:1AzjRpngfsaHv3eJGf

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1268	622d00503f135d751f91a743db996843524ea687db490d922a5e94ea00384197.exe
1268	622d00503f135d751f91a743db996843524ea687db490d922a5e94ea00384197.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1268 wrote to memory of 1212	1268	622d00503f135d751f91a743db996843524ea687db490d922a5e94ea00384197.exe	14
PID 1268 wrote to memory of 1212	1268	622d00503f135d751f91a743db996843524ea687db490d922a5e94ea00384197.exe	14
PID 1268 wrote to memory of 1212	1268	622d00503f135d751f91a743db996843524ea687db490d922a5e94ea00384197.exe	14
PID 1268 wrote to memory of 1212	1268	622d00503f135d751f91a743db996843524ea687db490d922a5e94ea00384197.exe	14

memory/1212-56-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/1268-54-0x0000000000400000-0x00000000004083A0-memory.dmp

Filesize
32KB

Download
memory/1268-55-0x00000000757A1000-0x00000000757A3000-memory.dmp

Filesize
8KB

Download
memory/1268-59-0x0000000010000000-0x0000000010012000-memory.dmp

Filesize
72KB

Download