45e83a88882641583d4a108da862d153d8750ffd761223f313a9f9971af08f1c

Analysis

max time kernel
112s
max time network
130s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
28/10/2022, 23:07

Target
45e83a88882641583d4a108da862d153d8750ffd761223f313a9f9971af08f1c.exe
Size 53KB
Sample221028-24cq2sbfgl
SHA256 45e83a88882641583d4a108da862d153d8750ffd761223f313a9f9971af08f1c
MD5 0bd061250ce2c7ad5e8d3269493ebf58
SHA1 55542f3c90e27fe2212cf0d39f45f7737742dd43
SHA512 7bca3e2a063388d4ff2cfede9089e30b5f4088a9ed499cd1585fb51336431acea33aa2e1d381a9203e28c80c84bf4da5e2027513470c5fb8d85ae12e5e5f201f
SSDEEP 1536:D0WYXWOp4diFd5RVGFKM5Lycqd0ENjB199:D0WPOp4i5RgKMhyhd02t199
MD5 SHA1 SHA512 SSDEEP

Score

5^/10

Drops file in System32 directory 1 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\wincom32.sys	45e83a88882641583d4a108da862d153d8750ffd761223f313a9f9971af08f1c.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
660	Process not Found

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 2576 wrote to memory of 4436	2576	45e83a88882641583d4a108da862d153d8750ffd761223f313a9f9971af08f1c.exe	83
PID 2576 wrote to memory of 4436	2576	45e83a88882641583d4a108da862d153d8750ffd761223f313a9f9971af08f1c.exe	83
PID 2576 wrote to memory of 4436	2576	45e83a88882641583d4a108da862d153d8750ffd761223f313a9f9971af08f1c.exe	83
PID 2576 wrote to memory of 4148	2576	45e83a88882641583d4a108da862d153d8750ffd761223f313a9f9971af08f1c.exe	84
PID 2576 wrote to memory of 4148	2576	45e83a88882641583d4a108da862d153d8750ffd761223f313a9f9971af08f1c.exe	84
PID 2576 wrote to memory of 4148	2576	45e83a88882641583d4a108da862d153d8750ffd761223f313a9f9971af08f1c.exe	84
PID 4148 wrote to memory of 424	4148	w32tm.exe	85
PID 4148 wrote to memory of 424	4148	w32tm.exe	85
PID 4436 wrote to memory of 4528	4436	w32tm.exe	86
PID 4436 wrote to memory of 4528	4436	w32tm.exe	86

memory/2576-132-0x0000000000400000-0x0000000000413000-memory.dmp

Download

memory/2576-133-0x0000000000400000-0x0000000000413000-memory.dmp

Download

memory/2576-137-0x0000000000400000-0x0000000000413000-memory.dmp

Download