73cca4302090d1946c6a3e296b091deada85b5cd412f11c79a1d82fec8539731

Analysis

max time kernel
90s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 11:11

Target

73cca4302090d1946c6a3e296b091deada85b5cd412f11c79a1d82fec8539731.exe
Size

527KB
MD5

0d3df5f6724867e3e07b0eea2c00b27d
SHA1

41973fe537dee9d3192adda09c67e0cffa09d8d7
SHA256

73cca4302090d1946c6a3e296b091deada85b5cd412f11c79a1d82fec8539731
SHA512

e9969ceb0cb8acd431b999fdc17ebe8553c9fa005dc347bb40030bac23cfdc1d12163145af1d2c30ad67470895ee545b676ff6bdfc221f8fb9e086178476a516
SSDEEP

12288:yhkFxxHvfd44C7Da0aqL6x+XjhByJ3NQZCH6g:RnR67W0vE3Fj

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

73cca4302090d1946c6a3e296b091deada85b5cd412f11c79a1d82fec8539731.exe

description	pid	process	target process
PID 4032 wrote to memory of 5040	4032	73cca4302090d1946c6a3e296b091deada85b5cd412f11c79a1d82fec8539731.exe	73cca4302090d1946c6a3e296b091deada85b5cd412f11c79a1d82fec8539731.exe
PID 4032 wrote to memory of 5040	4032	73cca4302090d1946c6a3e296b091deada85b5cd412f11c79a1d82fec8539731.exe	73cca4302090d1946c6a3e296b091deada85b5cd412f11c79a1d82fec8539731.exe
PID 4032 wrote to memory of 5040	4032	73cca4302090d1946c6a3e296b091deada85b5cd412f11c79a1d82fec8539731.exe	73cca4302090d1946c6a3e296b091deada85b5cd412f11c79a1d82fec8539731.exe

C:\Users\Admin\AppData\Local\Temp\73cca4302090d1946c6a3e296b091deada85b5cd412f11c79a1d82fec8539731.exe
"C:\Users\Admin\AppData\Local\Temp\73cca4302090d1946c6a3e296b091deada85b5cd412f11c79a1d82fec8539731.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4032

C:\Users\Admin\AppData\Local\Temp\73cca4302090d1946c6a3e296b091deada85b5cd412f11c79a1d82fec8539731.exe
tear
2⤵
PID:5040

memory/4032-133-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/5040-132-0x0000000000000000-mapping.dmp

Download
memory/5040-134-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/5040-135-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download