d2fbd21e5b5dab486f0eb6df02df5a6e81464fb0d067aa14c82c54a6f8eb9094

Analysis

max time kernel
353s
max time network
385s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 11:53

Target

d2fbd21e5b5dab486f0eb6df02df5a6e81464fb0d067aa14c82c54a6f8eb9094.exe
Size

526KB
MD5

5467bbeb3da1ca8cf5d9114ad5421f29
SHA1

b92d7815e4a02a3024072d6705b58bacd97dbedf
SHA256

d2fbd21e5b5dab486f0eb6df02df5a6e81464fb0d067aa14c82c54a6f8eb9094
SHA512

0a7ea94c22d8b3a0b6b95c5ccbb5a5d2b33665451bd2a7bb8d4527a03e9c4641bd1ad905c05d6cdbacf2139fc979ca841595ca778ad705288e297c289a07f27c
SSDEEP

12288:NmStFG31yMdDUFuoQvaXITQnCSVVqCzxo4xUupSMrFCsNEfF4SSf:QmG3cMdo0b+MtIVhG4quouFCsNaHSf

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

d2fbd21e5b5dab486f0eb6df02df5a6e81464fb0d067aa14c82c54a6f8eb9094.exe

description	pid	process	target process
PID 2536 wrote to memory of 3760	2536	d2fbd21e5b5dab486f0eb6df02df5a6e81464fb0d067aa14c82c54a6f8eb9094.exe	d2fbd21e5b5dab486f0eb6df02df5a6e81464fb0d067aa14c82c54a6f8eb9094.exe
PID 2536 wrote to memory of 3760	2536	d2fbd21e5b5dab486f0eb6df02df5a6e81464fb0d067aa14c82c54a6f8eb9094.exe	d2fbd21e5b5dab486f0eb6df02df5a6e81464fb0d067aa14c82c54a6f8eb9094.exe
PID 2536 wrote to memory of 3760	2536	d2fbd21e5b5dab486f0eb6df02df5a6e81464fb0d067aa14c82c54a6f8eb9094.exe	d2fbd21e5b5dab486f0eb6df02df5a6e81464fb0d067aa14c82c54a6f8eb9094.exe

C:\Users\Admin\AppData\Local\Temp\d2fbd21e5b5dab486f0eb6df02df5a6e81464fb0d067aa14c82c54a6f8eb9094.exe
"C:\Users\Admin\AppData\Local\Temp\d2fbd21e5b5dab486f0eb6df02df5a6e81464fb0d067aa14c82c54a6f8eb9094.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2536

C:\Users\Admin\AppData\Local\Temp\d2fbd21e5b5dab486f0eb6df02df5a6e81464fb0d067aa14c82c54a6f8eb9094.exe
tear
2⤵
PID:3760

memory/2536-132-0x0000000000400000-0x000000000048C000-memory.dmp

Filesize
560KB

Download
memory/2536-134-0x0000000000400000-0x000000000048C000-memory.dmp

Filesize
560KB

Download
memory/3760-133-0x0000000000000000-mapping.dmp

Download
memory/3760-135-0x0000000000400000-0x000000000048C000-memory.dmp

Filesize
560KB

Download
memory/3760-136-0x0000000000400000-0x000000000048C000-memory.dmp

Filesize
560KB

Download