45be9f9e09bede61f1e8b4659f2d1f0f52ffde5fe1c456e270a3637be8ea20e9

Analysis

max time kernel
88s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
30/10/2022, 19:31

Target

45be9f9e09bede61f1e8b4659f2d1f0f52ffde5fe1c456e270a3637be8ea20e9.exe
Size

50KB
MD5

82ab343cc778b1dbf38311b7cf607e2d
SHA1

7b7c5eade63b24d1388d65645426433d72143ad5
SHA256

45be9f9e09bede61f1e8b4659f2d1f0f52ffde5fe1c456e270a3637be8ea20e9
SHA512

5d60ea4e6c591423fc59244c91206cbf652407657762648d12777259485d7b77e6a6ddd51f6478452e0238482df5a5f75c6652c10aab971b00840900361a1441
SSDEEP

768:hUjKVjl9xw3x6nz7vj1wrBHutYvZQTWlZXPvDTo24H487MCptny/:hUKJ3zzj1wtODWvXDcHZM0tn2

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
2300	45be9f9e09bede61f1e8b4659f2d1f0f52ffde5fe1c456e270a3637be8ea20e9.exe
2300	45be9f9e09bede61f1e8b4659f2d1f0f52ffde5fe1c456e270a3637be8ea20e9.exe
2300	45be9f9e09bede61f1e8b4659f2d1f0f52ffde5fe1c456e270a3637be8ea20e9.exe
2300	45be9f9e09bede61f1e8b4659f2d1f0f52ffde5fe1c456e270a3637be8ea20e9.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 2300 wrote to memory of 2940	2300	45be9f9e09bede61f1e8b4659f2d1f0f52ffde5fe1c456e270a3637be8ea20e9.exe	42
PID 2300 wrote to memory of 2940	2300	45be9f9e09bede61f1e8b4659f2d1f0f52ffde5fe1c456e270a3637be8ea20e9.exe	42
PID 2300 wrote to memory of 2940	2300	45be9f9e09bede61f1e8b4659f2d1f0f52ffde5fe1c456e270a3637be8ea20e9.exe	42
PID 2300 wrote to memory of 2940	2300	45be9f9e09bede61f1e8b4659f2d1f0f52ffde5fe1c456e270a3637be8ea20e9.exe	42
PID 2300 wrote to memory of 2940	2300	45be9f9e09bede61f1e8b4659f2d1f0f52ffde5fe1c456e270a3637be8ea20e9.exe	42
PID 2300 wrote to memory of 2940	2300	45be9f9e09bede61f1e8b4659f2d1f0f52ffde5fe1c456e270a3637be8ea20e9.exe	42

memory/2300-132-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2300-133-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download
memory/2300-135-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download
memory/2940-134-0x000000007FFC0000-0x000000007FFC6000-memory.dmp

Filesize
24KB

Download