b7bf354d37e13b9ed004861a12c1ec19684022544ac65d47e5f9006686d8633b

Analysis

max time kernel
40s
max time network
44s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
07/11/2022, 16:05

Target

b7bf354d37e13b9ed004861a12c1ec19684022544ac65d47e5f9006686d8633b.exe
Size

56KB
MD5

09d03343889b7c5eeef1bd2097eeea37
SHA1

00917d22fbd523b84f694c636f6d85552e8ab6a6
SHA256

b7bf354d37e13b9ed004861a12c1ec19684022544ac65d47e5f9006686d8633b
SHA512

d0da756ee583c41a3028594cabfd9c271a7bd9d8677fface36d252621d709a3411776758cd37bb08c4a37d05b773784e248f33e601213d12d4b9ff24ffd649ff
SSDEEP

1536:JCKoLD+h/84UimkdxM22uWDQn40/IaI5Z:JCKomy45Z72uBe3

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
856	b7bf354d37e13b9ed004861a12c1ec19684022544ac65d47e5f9006686d8633b.exe
856	b7bf354d37e13b9ed004861a12c1ec19684022544ac65d47e5f9006686d8633b.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 856 wrote to memory of 1260	856	b7bf354d37e13b9ed004861a12c1ec19684022544ac65d47e5f9006686d8633b.exe	16
PID 856 wrote to memory of 1260	856	b7bf354d37e13b9ed004861a12c1ec19684022544ac65d47e5f9006686d8633b.exe	16
PID 856 wrote to memory of 1260	856	b7bf354d37e13b9ed004861a12c1ec19684022544ac65d47e5f9006686d8633b.exe	16
PID 856 wrote to memory of 1260	856	b7bf354d37e13b9ed004861a12c1ec19684022544ac65d47e5f9006686d8633b.exe	16

memory/856-54-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/856-55-0x0000000076151000-0x0000000076153000-memory.dmp

Filesize
8KB

Download
memory/856-59-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/1260-56-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download