66fa6a682a809122bef26365d2419a228699f07038c9d22235449c081f0d70bc

Analysis

max time kernel
74s
max time network
102s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
23-11-2022 11:11

Target

66fa6a682a809122bef26365d2419a228699f07038c9d22235449c081f0d70bc.exe
Size

533KB
MD5

b3b0210d2d27909371cec249b27f101b
SHA1

d254a2a65c9f85614edb08e2f2176081afec930a
SHA256

66fa6a682a809122bef26365d2419a228699f07038c9d22235449c081f0d70bc
SHA512

372d500f100fa566266737adb157cb5f196c2710e307215da578740a93dbb0abb5d4ed80351385fd00d8c9fd8ccc99b8669e7b63bc0318bb36a97561b0602c01
SSDEEP

12288:Sxzrs5zwGPlfzHH4YSeGA6y7XsAnvhRg4GwoDl:ppdfzQer78+g4GwoJ

Score

1^/10

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

66fa6a682a809122bef26365d2419a228699f07038c9d22235449c081f0d70bc.exe

description	pid	process	target process
PID 2036 wrote to memory of 960	2036	66fa6a682a809122bef26365d2419a228699f07038c9d22235449c081f0d70bc.exe	66fa6a682a809122bef26365d2419a228699f07038c9d22235449c081f0d70bc.exe
PID 2036 wrote to memory of 960	2036	66fa6a682a809122bef26365d2419a228699f07038c9d22235449c081f0d70bc.exe	66fa6a682a809122bef26365d2419a228699f07038c9d22235449c081f0d70bc.exe
PID 2036 wrote to memory of 960	2036	66fa6a682a809122bef26365d2419a228699f07038c9d22235449c081f0d70bc.exe	66fa6a682a809122bef26365d2419a228699f07038c9d22235449c081f0d70bc.exe
PID 2036 wrote to memory of 960	2036	66fa6a682a809122bef26365d2419a228699f07038c9d22235449c081f0d70bc.exe	66fa6a682a809122bef26365d2419a228699f07038c9d22235449c081f0d70bc.exe

C:\Users\Admin\AppData\Local\Temp\66fa6a682a809122bef26365d2419a228699f07038c9d22235449c081f0d70bc.exe
"C:\Users\Admin\AppData\Local\Temp\66fa6a682a809122bef26365d2419a228699f07038c9d22235449c081f0d70bc.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2036

C:\Users\Admin\AppData\Local\Temp\66fa6a682a809122bef26365d2419a228699f07038c9d22235449c081f0d70bc.exe
tear
2⤵
PID:960

memory/960-55-0x0000000000000000-mapping.dmp

Download
memory/960-58-0x0000000000400000-0x0000000000490000-memory.dmp

Filesize
576KB

Download
memory/960-59-0x0000000000400000-0x0000000000490000-memory.dmp

Filesize
576KB

Download
memory/2036-54-0x0000000076391000-0x0000000076393000-memory.dmp

Filesize
8KB

Download
memory/2036-56-0x0000000000400000-0x0000000000490000-memory.dmp

Filesize
576KB

Download