cdefcedb4deb9d6e5fdfacf423044c9be3246966e79d56ee84a499504555de71

Analysis

max time kernel
112s
max time network
134s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
29/10/2022, 19:45

Target

cdefcedb4deb9d6e5fdfacf423044c9be3246966e79d56ee84a499504555de71.exe
Size

160KB
MD5

839464d270a6d1795ec2c5da01a2581b
SHA1

af74a52d5963960becf0f25dc8a372754ecdd6ce
SHA256

cdefcedb4deb9d6e5fdfacf423044c9be3246966e79d56ee84a499504555de71
SHA512

9a1ea5b333bcb5a99045ce19203a18558b69c827d2cfe65f5c805b3060743deee439c7ba85e72ccd291e5f9f72dc38d08dda5caeb607e37580ba511482fc596c
SSDEEP

3072:rCZ4LBvSzrJ1GLFiKZxPFoBcsZOp3fyXZjTHPIcAozE4r/Aadi:rCZ4qXJ1FCPFoB8IjTHPINozFjvdi

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
2820	cdefcedb4deb9d6e5fdfacf423044c9be3246966e79d56ee84a499504555de71.exe
2820	cdefcedb4deb9d6e5fdfacf423044c9be3246966e79d56ee84a499504555de71.exe
2820	cdefcedb4deb9d6e5fdfacf423044c9be3246966e79d56ee84a499504555de71.exe
2820	cdefcedb4deb9d6e5fdfacf423044c9be3246966e79d56ee84a499504555de71.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 2820 wrote to memory of 3036	2820	cdefcedb4deb9d6e5fdfacf423044c9be3246966e79d56ee84a499504555de71.exe	22
PID 2820 wrote to memory of 3036	2820	cdefcedb4deb9d6e5fdfacf423044c9be3246966e79d56ee84a499504555de71.exe	22
PID 2820 wrote to memory of 3036	2820	cdefcedb4deb9d6e5fdfacf423044c9be3246966e79d56ee84a499504555de71.exe	22
PID 2820 wrote to memory of 3036	2820	cdefcedb4deb9d6e5fdfacf423044c9be3246966e79d56ee84a499504555de71.exe	22
PID 2820 wrote to memory of 3036	2820	cdefcedb4deb9d6e5fdfacf423044c9be3246966e79d56ee84a499504555de71.exe	22
PID 2820 wrote to memory of 3036	2820	cdefcedb4deb9d6e5fdfacf423044c9be3246966e79d56ee84a499504555de71.exe	22

memory/2820-132-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/2820-134-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/2820-135-0x0000000000580000-0x0000000000584000-memory.dmp

Filesize
16KB

Download
memory/2820-136-0x00000000005C0000-0x00000000005F9000-memory.dmp

Filesize
228KB

Download
memory/2820-137-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download
memory/2820-138-0x00000000005C0000-0x00000000005F9000-memory.dmp

Filesize
228KB

Download
memory/3036-133-0x000000007FFC0000-0x000000007FFC6000-memory.dmp

Filesize
24KB

Download