66fa6a682a809122bef26365d2419a228699f07038c9d22235449c081f0d70bc

Analysis

max time kernel
203s
max time network
209s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 11:11

Target

66fa6a682a809122bef26365d2419a228699f07038c9d22235449c081f0d70bc.exe
Size

533KB
MD5

b3b0210d2d27909371cec249b27f101b
SHA1

d254a2a65c9f85614edb08e2f2176081afec930a
SHA256

66fa6a682a809122bef26365d2419a228699f07038c9d22235449c081f0d70bc
SHA512

372d500f100fa566266737adb157cb5f196c2710e307215da578740a93dbb0abb5d4ed80351385fd00d8c9fd8ccc99b8669e7b63bc0318bb36a97561b0602c01
SSDEEP

12288:Sxzrs5zwGPlfzHH4YSeGA6y7XsAnvhRg4GwoDl:ppdfzQer78+g4GwoJ

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

66fa6a682a809122bef26365d2419a228699f07038c9d22235449c081f0d70bc.exe

description	pid	process	target process
PID 1052 wrote to memory of 4856	1052	66fa6a682a809122bef26365d2419a228699f07038c9d22235449c081f0d70bc.exe	66fa6a682a809122bef26365d2419a228699f07038c9d22235449c081f0d70bc.exe
PID 1052 wrote to memory of 4856	1052	66fa6a682a809122bef26365d2419a228699f07038c9d22235449c081f0d70bc.exe	66fa6a682a809122bef26365d2419a228699f07038c9d22235449c081f0d70bc.exe
PID 1052 wrote to memory of 4856	1052	66fa6a682a809122bef26365d2419a228699f07038c9d22235449c081f0d70bc.exe	66fa6a682a809122bef26365d2419a228699f07038c9d22235449c081f0d70bc.exe

C:\Users\Admin\AppData\Local\Temp\66fa6a682a809122bef26365d2419a228699f07038c9d22235449c081f0d70bc.exe
"C:\Users\Admin\AppData\Local\Temp\66fa6a682a809122bef26365d2419a228699f07038c9d22235449c081f0d70bc.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1052

C:\Users\Admin\AppData\Local\Temp\66fa6a682a809122bef26365d2419a228699f07038c9d22235449c081f0d70bc.exe
tear
2⤵
PID:4856

memory/1052-133-0x0000000000400000-0x0000000000490000-memory.dmp

Filesize
576KB

Download
memory/4856-132-0x0000000000000000-mapping.dmp

Download
memory/4856-134-0x0000000000400000-0x0000000000490000-memory.dmp

Filesize
576KB

Download
memory/4856-135-0x0000000000400000-0x0000000000490000-memory.dmp

Filesize
576KB

Download
memory/4856-136-0x0000000000400000-0x0000000000490000-memory.dmp

Filesize
576KB

Download