6b6521e6ba7851e8f1d9ee874dc045903b87d1feaeffd7fbc98fd38f1b730fd5

Analysis

max time kernel
118s
max time network
182s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
20-10-2022 20:09

Target

6b6521e6ba7851e8f1d9ee874dc045903b87d1feaeffd7fbc98fd38f1b730fd5.exe
Size

249KB
MD5

a04e1b4118201757b3d23d7a48225272
SHA1

72fc52037e65ef0e4b65c922c97a08907c09699e
SHA256

6b6521e6ba7851e8f1d9ee874dc045903b87d1feaeffd7fbc98fd38f1b730fd5
SHA512

2f13fc7947e0589ab7cf93cc37563395ba5c468e11da305a2e1561db593eaf23b7f643c0af74240fd5d9d416fc98cad4c8d14bcf7fc97cfd0d42ff1bbc4dafb1
SSDEEP

3072:zM/QeUBEVGhzgUOdg0D5MPTdf/sTnngFEaY/uKV0RllllD0:6QeURhz5GD58icE7/uTllll

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
848	6b6521e6ba7851e8f1d9ee874dc045903b87d1feaeffd7fbc98fd38f1b730fd5.exe
848	6b6521e6ba7851e8f1d9ee874dc045903b87d1feaeffd7fbc98fd38f1b730fd5.exe

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
848	6b6521e6ba7851e8f1d9ee874dc045903b87d1feaeffd7fbc98fd38f1b730fd5.exe

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 848 wrote to memory of 3036	848	6b6521e6ba7851e8f1d9ee874dc045903b87d1feaeffd7fbc98fd38f1b730fd5.exe	48
PID 848 wrote to memory of 3036	848	6b6521e6ba7851e8f1d9ee874dc045903b87d1feaeffd7fbc98fd38f1b730fd5.exe	48
PID 848 wrote to memory of 3036	848	6b6521e6ba7851e8f1d9ee874dc045903b87d1feaeffd7fbc98fd38f1b730fd5.exe	48
PID 848 wrote to memory of 3036	848	6b6521e6ba7851e8f1d9ee874dc045903b87d1feaeffd7fbc98fd38f1b730fd5.exe	48
PID 848 wrote to memory of 3036	848	6b6521e6ba7851e8f1d9ee874dc045903b87d1feaeffd7fbc98fd38f1b730fd5.exe	48

memory/848-132-0x0000000000400000-0x0000000000453000-memory.dmp

Filesize
332KB

Download
memory/848-133-0x0000000000400000-0x000000000041F000-memory.dmp

Filesize
124KB

Download
memory/848-134-0x0000000017180000-0x000000001719F000-memory.dmp

Filesize
124KB

Download