59562338425f87c091a34b7c296cfdf2fb610cb8c8e86465c230ee474b15570e

Analysis

max time kernel
134s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
06/11/2022, 08:50

Target

59562338425f87c091a34b7c296cfdf2fb610cb8c8e86465c230ee474b15570e.exe
Size

39KB
MD5

404297d7f616b87593d17632a9da0f40
SHA1

0b19915aaec03c7333688153c6b6b12aa93531e1
SHA256

59562338425f87c091a34b7c296cfdf2fb610cb8c8e86465c230ee474b15570e
SHA512

cc209c7838e168f7df8bd4b711808548e9925ffec5e87323c8ba581c74bd3f987ca23740f11ab17cc039520eee45339cc4942d138082a7ba3086c6fa4063dec9
SSDEEP

768:/aRI0bgxqhoggiXw2nMz6D59wFcAXZ1wZ:/aLgTgDAoMz69wFcAXZ1wZ

Score

1^/10

Suspicious behavior: MapViewOfSection 2 IoCs

pid	Process
2096	59562338425f87c091a34b7c296cfdf2fb610cb8c8e86465c230ee474b15570e.exe
2096	59562338425f87c091a34b7c296cfdf2fb610cb8c8e86465c230ee474b15570e.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2096 wrote to memory of 3320	2096	59562338425f87c091a34b7c296cfdf2fb610cb8c8e86465c230ee474b15570e.exe	80
PID 2096 wrote to memory of 3320	2096	59562338425f87c091a34b7c296cfdf2fb610cb8c8e86465c230ee474b15570e.exe	80
PID 2096 wrote to memory of 3320	2096	59562338425f87c091a34b7c296cfdf2fb610cb8c8e86465c230ee474b15570e.exe	80

memory/2096-133-0x0000000000400000-0x000000000040D000-memory.dmp

Filesize
52KB

Download