972e51856d9474812ab449067ece1706437bcaf315a7c4ec3bde9e1f0ab55900

Analysis

max time kernel
157s
max time network
183s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 12:02

Target

972e51856d9474812ab449067ece1706437bcaf315a7c4ec3bde9e1f0ab55900.exe
Size

526KB
MD5

e6f98ed2edba58c370e8910cb9ab2a67
SHA1

44da364f798b4b5d08d173569794de494215072d
SHA256

972e51856d9474812ab449067ece1706437bcaf315a7c4ec3bde9e1f0ab55900
SHA512

054ba8055ed9a096a09759b857a5f25867b25cef9f313376637a277f7c43b6e01ad32f453845d2a21add4280512bbb1a0e8a5cd283aeec7f115a3169234afaeb
SSDEEP

12288:wCCrSyMAeePZUhujAOly18xQqpx8O5eJ1qZ:w3rdPloujTlatqpx87wZ

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

972e51856d9474812ab449067ece1706437bcaf315a7c4ec3bde9e1f0ab55900.exe

description	pid	process	target process
PID 4884 wrote to memory of 5036	4884	972e51856d9474812ab449067ece1706437bcaf315a7c4ec3bde9e1f0ab55900.exe	972e51856d9474812ab449067ece1706437bcaf315a7c4ec3bde9e1f0ab55900.exe
PID 4884 wrote to memory of 5036	4884	972e51856d9474812ab449067ece1706437bcaf315a7c4ec3bde9e1f0ab55900.exe	972e51856d9474812ab449067ece1706437bcaf315a7c4ec3bde9e1f0ab55900.exe
PID 4884 wrote to memory of 5036	4884	972e51856d9474812ab449067ece1706437bcaf315a7c4ec3bde9e1f0ab55900.exe	972e51856d9474812ab449067ece1706437bcaf315a7c4ec3bde9e1f0ab55900.exe

C:\Users\Admin\AppData\Local\Temp\972e51856d9474812ab449067ece1706437bcaf315a7c4ec3bde9e1f0ab55900.exe
"C:\Users\Admin\AppData\Local\Temp\972e51856d9474812ab449067ece1706437bcaf315a7c4ec3bde9e1f0ab55900.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4884

C:\Users\Admin\AppData\Local\Temp\972e51856d9474812ab449067ece1706437bcaf315a7c4ec3bde9e1f0ab55900.exe
tear
2⤵
PID:5036

memory/4884-132-0x0000000000400000-0x000000000048C000-memory.dmp

Filesize
560KB

Download
memory/4884-134-0x0000000000400000-0x000000000048C000-memory.dmp

Filesize
560KB

Download
memory/5036-133-0x0000000000000000-mapping.dmp

Download
memory/5036-135-0x0000000000400000-0x000000000048C000-memory.dmp

Filesize
560KB

Download
memory/5036-136-0x0000000000400000-0x000000000048C000-memory.dmp

Filesize
560KB

Download
memory/5036-137-0x0000000000400000-0x000000000048C000-memory.dmp

Filesize
560KB

Download