d6e9e03db2a0c37b157e4a5e9d28094b0ab7edc910ff1cd58d9b1adc4b467e06

Analysis

max time kernel
42s
max time network
48s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
29-10-2022 01:51

Target

d6e9e03db2a0c37b157e4a5e9d28094b0ab7edc910ff1cd58d9b1adc4b467e06.exe
Size

31KB
MD5

0066e12e25a37a5ab2844acf8596f8cc
SHA1

2bc5ed396d617f9a655708d05dc9f24fc1b0e5e2
SHA256

d6e9e03db2a0c37b157e4a5e9d28094b0ab7edc910ff1cd58d9b1adc4b467e06
SHA512

7d65d2aac2a4385c74e1cfd9e41c588817ab8816728ccf30a6b30a402dde42686bf930d73004038776633acbaeb92b0d04ec0cf58626180cff732f38953f382c
SSDEEP

768:Z+h7TzTBziifTeiZSVWihwEknh0L7OTLeNfQf4:kZ/nEkh8OTKNx

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1516	d6e9e03db2a0c37b157e4a5e9d28094b0ab7edc910ff1cd58d9b1adc4b467e06.exe
1516	d6e9e03db2a0c37b157e4a5e9d28094b0ab7edc910ff1cd58d9b1adc4b467e06.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1516 wrote to memory of 1236	1516	d6e9e03db2a0c37b157e4a5e9d28094b0ab7edc910ff1cd58d9b1adc4b467e06.exe	8
PID 1516 wrote to memory of 1236	1516	d6e9e03db2a0c37b157e4a5e9d28094b0ab7edc910ff1cd58d9b1adc4b467e06.exe	8
PID 1516 wrote to memory of 1236	1516	d6e9e03db2a0c37b157e4a5e9d28094b0ab7edc910ff1cd58d9b1adc4b467e06.exe	8
PID 1516 wrote to memory of 1236	1516	d6e9e03db2a0c37b157e4a5e9d28094b0ab7edc910ff1cd58d9b1adc4b467e06.exe	8

memory/1236-56-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/1516-54-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1516-55-0x0000000075111000-0x0000000075113000-memory.dmp

Filesize
8KB

Download
memory/1516-59-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/1516-60-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download