6a6001a4d6b8a3dc7c06803161ce507c2b4795d50a9801989f6e63d949ee3ec1

Analysis

max time kernel
45s
max time network
49s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
28-10-2022 23:14

Target

6a6001a4d6b8a3dc7c06803161ce507c2b4795d50a9801989f6e63d949ee3ec1.exe
Size

295KB
MD5

0c6c40ddc06deff627da6b7121af4750
SHA1

5fa38057df2155e6d8ec3153024ce560330ec22e
SHA256

6a6001a4d6b8a3dc7c06803161ce507c2b4795d50a9801989f6e63d949ee3ec1
SHA512

4863a1d3916cbcd044fb6c5cf60f1a8b0c26273b6de2c108e8218606d834c42c6aa609a21500ac3f5983cfd035ed2b717e058ddb8416ada944f004dba8598af8
SSDEEP

6144:9nLPJRY8loDbxEB6oN1n2XCBrIHZta5zx/7V8k3dt72dQ78p3n9xVrMo:97JjGnqv28GZtQd7VXddIQYxn9Pr

Score

1^/10

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1600 wrote to memory of 1156	1600	6a6001a4d6b8a3dc7c06803161ce507c2b4795d50a9801989f6e63d949ee3ec1.exe	27
PID 1600 wrote to memory of 1156	1600	6a6001a4d6b8a3dc7c06803161ce507c2b4795d50a9801989f6e63d949ee3ec1.exe	27
PID 1600 wrote to memory of 1156	1600	6a6001a4d6b8a3dc7c06803161ce507c2b4795d50a9801989f6e63d949ee3ec1.exe	27
PID 1600 wrote to memory of 1156	1600	6a6001a4d6b8a3dc7c06803161ce507c2b4795d50a9801989f6e63d949ee3ec1.exe	27

C:\Users\Admin\AppData\Local\Temp\6a6001a4d6b8a3dc7c06803161ce507c2b4795d50a9801989f6e63d949ee3ec1.exe
"C:\Users\Admin\AppData\Local\Temp\6a6001a4d6b8a3dc7c06803161ce507c2b4795d50a9801989f6e63d949ee3ec1.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1600
- C:\Users\Admin\AppData\Local\Temp\6a6001a4d6b8a3dc7c06803161ce507c2b4795d50a9801989f6e63d949ee3ec1.exe
  tear
  2⤵
  PID:1156

memory/1156-55-0x0000000000000000-mapping.dmp

Download
memory/1156-58-0x0000000000400000-0x000000000045E000-memory.dmp

Filesize
376KB

Download
memory/1156-59-0x0000000000400000-0x000000000045E000-memory.dmp

Filesize
376KB

Download
memory/1600-54-0x0000000076461000-0x0000000076463000-memory.dmp

Filesize
8KB

Download
memory/1600-56-0x0000000000400000-0x000000000045E000-memory.dmp

Filesize
376KB

Download