5baee206f28f13b972e9a2a3b547d090d55277bca18c3d8ffb865e9189e74bec

Analysis

max time kernel
146s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 11:11

Target

5baee206f28f13b972e9a2a3b547d090d55277bca18c3d8ffb865e9189e74bec.exe
Size

519KB
MD5

4b75529add9f25c2e894b5432f35d636
SHA1

94b41df5887fc54c8c35fb39ca8dc4ef430cb732
SHA256

5baee206f28f13b972e9a2a3b547d090d55277bca18c3d8ffb865e9189e74bec
SHA512

5ddf2fbbcd5c014124d2d593bdb68f7cee3ce6fe1cc79deb2574c6366d9c23860a8afcdb9512553e52135c765358d29efd86c4c4fcf31046be8a36f630fb7a79
SSDEEP

12288:kL6wQVbyuhYIQG/au9sC1mtUd24BWJ6e4gpnC:kLpJIQGi2sQd24sJb

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

5baee206f28f13b972e9a2a3b547d090d55277bca18c3d8ffb865e9189e74bec.exe

description	pid	process	target process
PID 2808 wrote to memory of 1380	2808	5baee206f28f13b972e9a2a3b547d090d55277bca18c3d8ffb865e9189e74bec.exe	5baee206f28f13b972e9a2a3b547d090d55277bca18c3d8ffb865e9189e74bec.exe
PID 2808 wrote to memory of 1380	2808	5baee206f28f13b972e9a2a3b547d090d55277bca18c3d8ffb865e9189e74bec.exe	5baee206f28f13b972e9a2a3b547d090d55277bca18c3d8ffb865e9189e74bec.exe
PID 2808 wrote to memory of 1380	2808	5baee206f28f13b972e9a2a3b547d090d55277bca18c3d8ffb865e9189e74bec.exe	5baee206f28f13b972e9a2a3b547d090d55277bca18c3d8ffb865e9189e74bec.exe

C:\Users\Admin\AppData\Local\Temp\5baee206f28f13b972e9a2a3b547d090d55277bca18c3d8ffb865e9189e74bec.exe
"C:\Users\Admin\AppData\Local\Temp\5baee206f28f13b972e9a2a3b547d090d55277bca18c3d8ffb865e9189e74bec.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2808

C:\Users\Admin\AppData\Local\Temp\5baee206f28f13b972e9a2a3b547d090d55277bca18c3d8ffb865e9189e74bec.exe
tear
2⤵
PID:1380

memory/1380-133-0x0000000000000000-mapping.dmp

Download
memory/1380-135-0x0000000000400000-0x000000000048B000-memory.dmp

Filesize
556KB

Download
memory/1380-136-0x0000000000400000-0x000000000048B000-memory.dmp

Filesize
556KB

Download
memory/2808-134-0x0000000000400000-0x000000000048B000-memory.dmp

Filesize
556KB

Download