0d8e9b6e3d7a56a6790629afcbe456a425b4f29d0eceec33b962ec3c991a61bd

Analysis

max time kernel
90s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
06-11-2022 14:54

Target

0d8e9b6e3d7a56a6790629afcbe456a425b4f29d0eceec33b962ec3c991a61bd.exe
Size

32KB
MD5

05356bb329e889fea4a4353e2b4361e1
SHA1

01e052261de0fa586dea5ffaff8a26bff7f509df
SHA256

0d8e9b6e3d7a56a6790629afcbe456a425b4f29d0eceec33b962ec3c991a61bd
SHA512

e24c7ff6bda24696bc1e15d46d12c8592bee883c14d84f1086c2f777aa3d5ef4b5f01fdfa26e32905398318fc654464da92c7ff728e725c670c7d837ec598929
SSDEEP

768:Z+h7TzTBziifTeiZSVWihwEknh0L7OTLeNfQfD:kZ/nEkh8OTKNo

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4848	0d8e9b6e3d7a56a6790629afcbe456a425b4f29d0eceec33b962ec3c991a61bd.exe
4848	0d8e9b6e3d7a56a6790629afcbe456a425b4f29d0eceec33b962ec3c991a61bd.exe
4848	0d8e9b6e3d7a56a6790629afcbe456a425b4f29d0eceec33b962ec3c991a61bd.exe
4848	0d8e9b6e3d7a56a6790629afcbe456a425b4f29d0eceec33b962ec3c991a61bd.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 4848 wrote to memory of 3048	4848	0d8e9b6e3d7a56a6790629afcbe456a425b4f29d0eceec33b962ec3c991a61bd.exe	31
PID 4848 wrote to memory of 3048	4848	0d8e9b6e3d7a56a6790629afcbe456a425b4f29d0eceec33b962ec3c991a61bd.exe	31
PID 4848 wrote to memory of 3048	4848	0d8e9b6e3d7a56a6790629afcbe456a425b4f29d0eceec33b962ec3c991a61bd.exe	31
PID 4848 wrote to memory of 3048	4848	0d8e9b6e3d7a56a6790629afcbe456a425b4f29d0eceec33b962ec3c991a61bd.exe	31

memory/3048-133-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/4848-132-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/4848-134-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/4848-135-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download