fc60ef9e522b54054695e734774e51ced483f9315c1dee112e57eaf1d307cad1

Analysis

max time kernel
149s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
20/10/2022, 01:12

Target

fc60ef9e522b54054695e734774e51ced483f9315c1dee112e57eaf1d307cad1.exe
Size

33KB
MD5

a0cd787450d1eb1fd1762d86409fc35b
SHA1

6927ef3e0a177764338ceea625d7be7cd601dba8
SHA256

fc60ef9e522b54054695e734774e51ced483f9315c1dee112e57eaf1d307cad1
SHA512

8baf9097bf832c55620b224164129c92eb58a05813d8c09206fed78a09d70cfb2870a6787cc09f5c82b173e1a0791eec773fa143d5486723475ec20aea80b24c
SSDEEP

768:AIxIxImezl3RmlqlEK5GkoDULNPgDGBjCGdF:qehcQEK5oENsKjCgF

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4448	fc60ef9e522b54054695e734774e51ced483f9315c1dee112e57eaf1d307cad1.exe
4448	fc60ef9e522b54054695e734774e51ced483f9315c1dee112e57eaf1d307cad1.exe
4448	fc60ef9e522b54054695e734774e51ced483f9315c1dee112e57eaf1d307cad1.exe
4448	fc60ef9e522b54054695e734774e51ced483f9315c1dee112e57eaf1d307cad1.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 4448 wrote to memory of 2560	4448	fc60ef9e522b54054695e734774e51ced483f9315c1dee112e57eaf1d307cad1.exe	14
PID 4448 wrote to memory of 2560	4448	fc60ef9e522b54054695e734774e51ced483f9315c1dee112e57eaf1d307cad1.exe	14
PID 4448 wrote to memory of 2560	4448	fc60ef9e522b54054695e734774e51ced483f9315c1dee112e57eaf1d307cad1.exe	14
PID 4448 wrote to memory of 2560	4448	fc60ef9e522b54054695e734774e51ced483f9315c1dee112e57eaf1d307cad1.exe	14

memory/2560-134-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/4448-132-0x0000000000400000-0x0000000000413970-memory.dmp

Filesize
78KB

Download
memory/4448-133-0x0000000000400000-0x0000000000413970-memory.dmp

Filesize
78KB

Download
memory/4448-135-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download