e2ca134a6a652967209e57e598149be6033cc99c14880807309aed9b4985437b

Analysis

max time kernel
189s
max time network
203s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 12:52

Target

e2ca134a6a652967209e57e598149be6033cc99c14880807309aed9b4985437b.exe
Size

524KB
MD5

1a7505d885deab795c5ede5f92ca4cd6
SHA1

1c8844e16544e299102aa5dfeb3c1c23e7c01724
SHA256

e2ca134a6a652967209e57e598149be6033cc99c14880807309aed9b4985437b
SHA512

fc699cf045fbf5634db223f48b5bfe656aa70142cc80a593ae4b35a2bf78ddbee7bd2a6e7d103d80af7be652581be8cc67837d20014cb91ea4271e2b266685e7
SSDEEP

6144:5DjM2+cPlFKbMGMuVtL1WyNxX23pDiUNJzfJy/lkly3HNCECBZvBVF8X2Vx2FBa7:2jMSPN6233HMVzvBVKXCuapzDBG

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

e2ca134a6a652967209e57e598149be6033cc99c14880807309aed9b4985437b.exe

description	pid	process	target process
PID 2784 wrote to memory of 1528	2784	e2ca134a6a652967209e57e598149be6033cc99c14880807309aed9b4985437b.exe	e2ca134a6a652967209e57e598149be6033cc99c14880807309aed9b4985437b.exe
PID 2784 wrote to memory of 1528	2784	e2ca134a6a652967209e57e598149be6033cc99c14880807309aed9b4985437b.exe	e2ca134a6a652967209e57e598149be6033cc99c14880807309aed9b4985437b.exe
PID 2784 wrote to memory of 1528	2784	e2ca134a6a652967209e57e598149be6033cc99c14880807309aed9b4985437b.exe	e2ca134a6a652967209e57e598149be6033cc99c14880807309aed9b4985437b.exe

C:\Users\Admin\AppData\Local\Temp\e2ca134a6a652967209e57e598149be6033cc99c14880807309aed9b4985437b.exe
"C:\Users\Admin\AppData\Local\Temp\e2ca134a6a652967209e57e598149be6033cc99c14880807309aed9b4985437b.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2784

C:\Users\Admin\AppData\Local\Temp\e2ca134a6a652967209e57e598149be6033cc99c14880807309aed9b4985437b.exe
tear
2⤵
PID:1528

memory/1528-133-0x0000000000000000-mapping.dmp

Download
memory/1528-135-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/1528-136-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/1528-137-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/1528-138-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/1528-139-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/2784-132-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/2784-134-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download