a0c8c1ff2368b5fdd9ea2ee2b7c7a57574339a3d426cc3b5e7708254f4907e70

Analysis

max time kernel
113s
max time network
163s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
20/10/2022, 01:13

Target

a0c8c1ff2368b5fdd9ea2ee2b7c7a57574339a3d426cc3b5e7708254f4907e70.exe
Size

28KB
MD5

91a94aa33e8876e686bc027aed267938
SHA1

220d07d909d83bf800adf2ac3a28665ed23ad744
SHA256

a0c8c1ff2368b5fdd9ea2ee2b7c7a57574339a3d426cc3b5e7708254f4907e70
SHA512

aac116dc22c81ea1c9e7d6463b48fafdea89304e31f9a67224d0796e6dfd537016af8ca3427c158577b0bd9dcdc1e627b588e2ff03a03d097a2a4686f59c2964
SSDEEP

384:UmOyMLjKMPH1Dxw7ZA8l9ZoA7k+w9G5hmssR0IkR46nzojn8mgRRtssIeo/r5J1B:hUjKVjl9xw3x6nz7vj1wrX

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1712	a0c8c1ff2368b5fdd9ea2ee2b7c7a57574339a3d426cc3b5e7708254f4907e70.exe
1712	a0c8c1ff2368b5fdd9ea2ee2b7c7a57574339a3d426cc3b5e7708254f4907e70.exe
1712	a0c8c1ff2368b5fdd9ea2ee2b7c7a57574339a3d426cc3b5e7708254f4907e70.exe
1712	a0c8c1ff2368b5fdd9ea2ee2b7c7a57574339a3d426cc3b5e7708254f4907e70.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 1712 wrote to memory of 3044	1712	a0c8c1ff2368b5fdd9ea2ee2b7c7a57574339a3d426cc3b5e7708254f4907e70.exe	39
PID 1712 wrote to memory of 3044	1712	a0c8c1ff2368b5fdd9ea2ee2b7c7a57574339a3d426cc3b5e7708254f4907e70.exe	39
PID 1712 wrote to memory of 3044	1712	a0c8c1ff2368b5fdd9ea2ee2b7c7a57574339a3d426cc3b5e7708254f4907e70.exe	39
PID 1712 wrote to memory of 3044	1712	a0c8c1ff2368b5fdd9ea2ee2b7c7a57574339a3d426cc3b5e7708254f4907e70.exe	39
PID 1712 wrote to memory of 3044	1712	a0c8c1ff2368b5fdd9ea2ee2b7c7a57574339a3d426cc3b5e7708254f4907e70.exe	39
PID 1712 wrote to memory of 3044	1712	a0c8c1ff2368b5fdd9ea2ee2b7c7a57574339a3d426cc3b5e7708254f4907e70.exe	39

memory/1712-132-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1712-133-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download
memory/1712-135-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1712-136-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download
memory/3044-134-0x000000007FFC0000-0x000000007FFC6000-memory.dmp

Filesize
24KB

Download