5d9179721234b18967af8fa1150e214ae36ddaeb15f9c41497f46efc50cad735

Analysis

max time kernel
146s
max time network
161s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
19/10/2022, 16:36

Target

5d9179721234b18967af8fa1150e214ae36ddaeb15f9c41497f46efc50cad735.exe
Size

24KB
MD5

8270c0ae97657aba95d0a4357496b6b0
SHA1

d97bdc5cb3eea0b3c0cfca6f51f762572fd86c56
SHA256

5d9179721234b18967af8fa1150e214ae36ddaeb15f9c41497f46efc50cad735
SHA512

99539da537ed1bf9c2fda3631c4b40004157f5d1e9a7a70861e086403d4f6020f67f4720c30302180f88729d3f056e57706d4a58582d8f0142d507e28bafb126
SSDEEP

96:KCX5XDqGTpCFpuqEm41N/nnSHrij0pCai987Pq:KA5zqoQpEj1N/nAG01i9WPq

Score

5^/10

Drops file in System32 directory 1 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\s.bat	5d9179721234b18967af8fa1150e214ae36ddaeb15f9c41497f46efc50cad735.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2036 wrote to memory of 4008	2036	5d9179721234b18967af8fa1150e214ae36ddaeb15f9c41497f46efc50cad735.exe	82
PID 2036 wrote to memory of 4008	2036	5d9179721234b18967af8fa1150e214ae36ddaeb15f9c41497f46efc50cad735.exe	82
PID 2036 wrote to memory of 4008	2036	5d9179721234b18967af8fa1150e214ae36ddaeb15f9c41497f46efc50cad735.exe	82

C:\Users\Admin\AppData\Local\Temp\5d9179721234b18967af8fa1150e214ae36ddaeb15f9c41497f46efc50cad735.exe
"C:\Users\Admin\AppData\Local\Temp\5d9179721234b18967af8fa1150e214ae36ddaeb15f9c41497f46efc50cad735.exe"
1⤵
- Drops file in System32 directory
- Suspicious use of WriteProcessMemory
PID:2036
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c C:\Windows\system32\s.bat
  2⤵
  PID:4008

C:\Windows\SysWOW64\s.bat

Filesize
255B

MD5
eb9f1e05a7fc79dda200cfc6a98af7ca

SHA1
e040235867768cac5b62bc1980b3bfbea595405b

SHA256
464ba22aee7fe1fcca53bb2f50771be189c2f3981e3e56877a58d88722435d21

SHA512
7cfbc3cfa75069b951b400d37bfdbe2857b031ed2ba04653d58c0259afffa5331c7e3f55dbecaeee4eb39f937d319ea6075142b1d8791a79f3b5ca1796df4139

Download Submit