57a6b10173a6da6607f8d643e58ba2d8cbaa1fac2b50110190a55196fcf40f15

Analysis

max time kernel
197s
max time network
203s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
23/11/2022, 23:50

Target

57a6b10173a6da6607f8d643e58ba2d8cbaa1fac2b50110190a55196fcf40f15.exe
Size

28KB
MD5

02980d631688c142d56ac7276e13c6f5
SHA1

924e43be5a2a88790de37744c9af8ea6adf5577c
SHA256

57a6b10173a6da6607f8d643e58ba2d8cbaa1fac2b50110190a55196fcf40f15
SHA512

64bbed7155b6dc685d79024e98dab6543fa2b1c953da0bb621d79029730fea66998fc866c019ea9e3c920d2933b5c8136aa498d23c847a691bc60ca4e3c7c22b
SSDEEP

384:UmOyMLjKMPH1Dxw7ZA8l9ZoA7k+w9G5hmssR0IkR46nzojn8mgRRtssIeo/r5J1k:hUjKVjl9xw3x6nz7vj1wrYf

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4708	57a6b10173a6da6607f8d643e58ba2d8cbaa1fac2b50110190a55196fcf40f15.exe
4708	57a6b10173a6da6607f8d643e58ba2d8cbaa1fac2b50110190a55196fcf40f15.exe
4708	57a6b10173a6da6607f8d643e58ba2d8cbaa1fac2b50110190a55196fcf40f15.exe
4708	57a6b10173a6da6607f8d643e58ba2d8cbaa1fac2b50110190a55196fcf40f15.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 4708 wrote to memory of 2720	4708	57a6b10173a6da6607f8d643e58ba2d8cbaa1fac2b50110190a55196fcf40f15.exe	65
PID 4708 wrote to memory of 2720	4708	57a6b10173a6da6607f8d643e58ba2d8cbaa1fac2b50110190a55196fcf40f15.exe	65
PID 4708 wrote to memory of 2720	4708	57a6b10173a6da6607f8d643e58ba2d8cbaa1fac2b50110190a55196fcf40f15.exe	65
PID 4708 wrote to memory of 2720	4708	57a6b10173a6da6607f8d643e58ba2d8cbaa1fac2b50110190a55196fcf40f15.exe	65
PID 4708 wrote to memory of 2720	4708	57a6b10173a6da6607f8d643e58ba2d8cbaa1fac2b50110190a55196fcf40f15.exe	65
PID 4708 wrote to memory of 2720	4708	57a6b10173a6da6607f8d643e58ba2d8cbaa1fac2b50110190a55196fcf40f15.exe	65

memory/2720-132-0x000000007FFC0000-0x000000007FFC6000-memory.dmp

Filesize
24KB

Download
memory/4708-133-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/4708-134-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download