cb204806a36d7c9bcac93897e9ec227c1317de460119725c908cb743982d94fc

Analysis

max time kernel
44s
max time network
49s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
20/10/2022, 08:06

Target

cb204806a36d7c9bcac93897e9ec227c1317de460119725c908cb743982d94fc.exe
Size

292KB
MD5

80ec17a05963011a06cf2831b616c086
SHA1

3bceffdd16dacfaa2122edac3f42396457befe95
SHA256

cb204806a36d7c9bcac93897e9ec227c1317de460119725c908cb743982d94fc
SHA512

5aac051442f4544ee7d61748f6045545feb514336c136d68ea7a33fa384c25c65b0c77e7997ac517e29721d1c254f2e4b7f27645409e517e736f96db4fd13851
SSDEEP

6144:i8xv1BwqgirJ0E6LQhMe8iD2+4CUZuhOirz7biZDn6P:98G0u78ev4huhrHi1n6P

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1064	cb204806a36d7c9bcac93897e9ec227c1317de460119725c908cb743982d94fc.exe
1064	cb204806a36d7c9bcac93897e9ec227c1317de460119725c908cb743982d94fc.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1064 wrote to memory of 1360	1064	cb204806a36d7c9bcac93897e9ec227c1317de460119725c908cb743982d94fc.exe	15
PID 1064 wrote to memory of 1360	1064	cb204806a36d7c9bcac93897e9ec227c1317de460119725c908cb743982d94fc.exe	15
PID 1064 wrote to memory of 1360	1064	cb204806a36d7c9bcac93897e9ec227c1317de460119725c908cb743982d94fc.exe	15
PID 1064 wrote to memory of 1360	1064	cb204806a36d7c9bcac93897e9ec227c1317de460119725c908cb743982d94fc.exe	15

memory/1064-54-0x0000000000400000-0x000000000045C000-memory.dmp

Filesize
368KB

Download
memory/1064-56-0x0000000000310000-0x000000000036C000-memory.dmp

Filesize
368KB

Download
memory/1064-61-0x0000000000400000-0x000000000045C000-memory.dmp

Filesize
368KB

Download
memory/1064-65-0x00000000003B0000-0x00000000003C3000-memory.dmp

Filesize
76KB

Download
memory/1360-62-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download