2dd93b28fe9123e837d8e8110eaeeac9387de533695ca86704a1c74e0c230d29

Analysis

max time kernel
136s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
23/11/2022, 22:54

Target

2dd93b28fe9123e837d8e8110eaeeac9387de533695ca86704a1c74e0c230d29.exe
Size

290KB
MD5

4578665c2d33d88b2adb95f9230c6b60
SHA1

494e74c8bda39ca111d43efba9833283b1902936
SHA256

2dd93b28fe9123e837d8e8110eaeeac9387de533695ca86704a1c74e0c230d29
SHA512

85a1c63cc314dc186bd5e9af89cffd43117ae8d73445b059e5cf6af751dc25a43beb5979dec2e0e59e3fab6f692e99cde27010ee7c1b53526f501bb32066e5f4
SSDEEP

6144:3F/y8MlZiSxEI+vVTNpfLjFVINKm4eRboaQ9it+6xa:VTMnzz+NpfViYm4SoaQH6xa

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 5040 wrote to memory of 4708	5040	2dd93b28fe9123e837d8e8110eaeeac9387de533695ca86704a1c74e0c230d29.exe	80
PID 5040 wrote to memory of 4708	5040	2dd93b28fe9123e837d8e8110eaeeac9387de533695ca86704a1c74e0c230d29.exe	80
PID 5040 wrote to memory of 4708	5040	2dd93b28fe9123e837d8e8110eaeeac9387de533695ca86704a1c74e0c230d29.exe	80

C:\Users\Admin\AppData\Local\Temp\2dd93b28fe9123e837d8e8110eaeeac9387de533695ca86704a1c74e0c230d29.exe
"C:\Users\Admin\AppData\Local\Temp\2dd93b28fe9123e837d8e8110eaeeac9387de533695ca86704a1c74e0c230d29.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5040
- C:\Users\Admin\AppData\Local\Temp\2dd93b28fe9123e837d8e8110eaeeac9387de533695ca86704a1c74e0c230d29.exe
  tear
  2⤵
  PID:4708

memory/4708-134-0x0000000000400000-0x0000000000463000-memory.dmp

Filesize
396KB

Download
memory/4708-135-0x0000000000400000-0x0000000000463000-memory.dmp

Filesize
396KB

Download
memory/4708-136-0x0000000000400000-0x0000000000463000-memory.dmp

Filesize
396KB

Download
memory/5040-133-0x0000000000400000-0x0000000000463000-memory.dmp

Filesize
396KB

Download