ffb9b8d50ce9e32a633fb67b183a21696192eb32e71988aa4000b6f4fa88b7e8

Analysis

max time kernel
132s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
07-11-2022 15:02

Target

ffb9b8d50ce9e32a633fb67b183a21696192eb32e71988aa4000b6f4fa88b7e8.exe
Size

113KB
MD5

05c6c741df881f080fbc89fec9e09930
SHA1

f57fbe4aebc65964265a2d9e6e40b1dc82b898e0
SHA256

ffb9b8d50ce9e32a633fb67b183a21696192eb32e71988aa4000b6f4fa88b7e8
SHA512

8b26fbf85aecd67b92ee80f9c00733e2bf3ee3e78e5d3fd72719871de6781cf3bfc24643d21b502ad97dd1cca2b2de4ef40c14f424e443709f8b7ee1a7127069
SSDEEP

1536:pxPOtFUNlWbZXmfxWbd220F3EFP8c7c0wjokMk2L+zFK0SDDgPLWxuEU92:POvEwbEpg220FT91M1azFxigioEj

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4648 wrote to memory of 680	4648	ffb9b8d50ce9e32a633fb67b183a21696192eb32e71988aa4000b6f4fa88b7e8.exe	80
PID 4648 wrote to memory of 680	4648	ffb9b8d50ce9e32a633fb67b183a21696192eb32e71988aa4000b6f4fa88b7e8.exe	80
PID 4648 wrote to memory of 680	4648	ffb9b8d50ce9e32a633fb67b183a21696192eb32e71988aa4000b6f4fa88b7e8.exe	80

C:\Users\Admin\AppData\Local\Temp\ffb9b8d50ce9e32a633fb67b183a21696192eb32e71988aa4000b6f4fa88b7e8.exe
"C:\Users\Admin\AppData\Local\Temp\ffb9b8d50ce9e32a633fb67b183a21696192eb32e71988aa4000b6f4fa88b7e8.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4648
- C:\Users\Admin\AppData\Local\Temp\ffb9b8d50ce9e32a633fb67b183a21696192eb32e71988aa4000b6f4fa88b7e8.exe
  ?
  2⤵
  PID:680

memory/680-137-0x0000000000000000-mapping.dmp

Download
memory/680-139-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download
memory/680-143-0x0000000010000000-0x000000001000C000-memory.dmp

Filesize
48KB

Download
memory/680-147-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download
memory/4648-132-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download
memory/4648-133-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download
memory/4648-138-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download