82b2777a5f47f4d6cb24ae7ef402a9c83867dc8c67d4ef00120d3ade428e2116

Analysis

max time kernel
140s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
14-10-2022 10:06

Target

82b2777a5f47f4d6cb24ae7ef402a9c83867dc8c67d4ef00120d3ade428e2116.exe
Size

28KB
MD5

69ac6dc4b3530a735d63bf61f809e3f3
SHA1

05fe3c7005fa1c7ced2ded1fab37b3adc48e26d3
SHA256

82b2777a5f47f4d6cb24ae7ef402a9c83867dc8c67d4ef00120d3ade428e2116
SHA512

70dc0cf9bf0c2cbc6ff888f0440d9c91bb4da28b18a96c4c0b64591ea1d8f93ae7e3bb1b2be0e8ffcf18c23834ad46ae77ca9018f80aa912fb0cf46512801972
SSDEEP

384:8mOyMLjKMPH1DxwxZA8l9ZoA7k+w9G5hmssR0IkR46nzojn8mgRRtssIeo/r5J1d:pUjKnjl9xw3x6nz7vj1wrb

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4412	82b2777a5f47f4d6cb24ae7ef402a9c83867dc8c67d4ef00120d3ade428e2116.exe
4412	82b2777a5f47f4d6cb24ae7ef402a9c83867dc8c67d4ef00120d3ade428e2116.exe
4412	82b2777a5f47f4d6cb24ae7ef402a9c83867dc8c67d4ef00120d3ade428e2116.exe
4412	82b2777a5f47f4d6cb24ae7ef402a9c83867dc8c67d4ef00120d3ade428e2116.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 4412 wrote to memory of 2740	4412	82b2777a5f47f4d6cb24ae7ef402a9c83867dc8c67d4ef00120d3ade428e2116.exe	40
PID 4412 wrote to memory of 2740	4412	82b2777a5f47f4d6cb24ae7ef402a9c83867dc8c67d4ef00120d3ade428e2116.exe	40
PID 4412 wrote to memory of 2740	4412	82b2777a5f47f4d6cb24ae7ef402a9c83867dc8c67d4ef00120d3ade428e2116.exe	40
PID 4412 wrote to memory of 2740	4412	82b2777a5f47f4d6cb24ae7ef402a9c83867dc8c67d4ef00120d3ade428e2116.exe	40
PID 4412 wrote to memory of 2740	4412	82b2777a5f47f4d6cb24ae7ef402a9c83867dc8c67d4ef00120d3ade428e2116.exe	40
PID 4412 wrote to memory of 2740	4412	82b2777a5f47f4d6cb24ae7ef402a9c83867dc8c67d4ef00120d3ade428e2116.exe	40

memory/2740-133-0x000000007FFC0000-0x000000007FFC6000-memory.dmp

Filesize
24KB

Download
memory/4412-132-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/4412-134-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download