dd99e2348f16ec768b9432e8b274889e782346d8ddbd13b521b09fe13f2afc71

Analysis

max time kernel
47s
max time network
70s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
23-11-2022 12:55

Target

dd99e2348f16ec768b9432e8b274889e782346d8ddbd13b521b09fe13f2afc71.exe
Size

532KB
MD5

6bfaa0c25401bedd608f240a8ed5361e
SHA1

de5562f3bef98fbfad7fb74df8ecebdae38215e0
SHA256

dd99e2348f16ec768b9432e8b274889e782346d8ddbd13b521b09fe13f2afc71
SHA512

7caa4d98085c3c76b7b490251eafb6a5c961ef8586d1d9518a202932627a27834ff472dbd1cdefa961896df04bb1abbbb1d69248cde5d43bf3864de119ef3f53
SSDEEP

12288:MW5FdwiiQcxD5XUbsASPh2RIbWcoIFFEgB9nP1pk:/57wpRxDNUbOp0IbWcoIFagbPHk

Score

1^/10

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

dd99e2348f16ec768b9432e8b274889e782346d8ddbd13b521b09fe13f2afc71.exe

description	pid	process	target process
PID 536 wrote to memory of 944	536	dd99e2348f16ec768b9432e8b274889e782346d8ddbd13b521b09fe13f2afc71.exe	dd99e2348f16ec768b9432e8b274889e782346d8ddbd13b521b09fe13f2afc71.exe
PID 536 wrote to memory of 944	536	dd99e2348f16ec768b9432e8b274889e782346d8ddbd13b521b09fe13f2afc71.exe	dd99e2348f16ec768b9432e8b274889e782346d8ddbd13b521b09fe13f2afc71.exe
PID 536 wrote to memory of 944	536	dd99e2348f16ec768b9432e8b274889e782346d8ddbd13b521b09fe13f2afc71.exe	dd99e2348f16ec768b9432e8b274889e782346d8ddbd13b521b09fe13f2afc71.exe
PID 536 wrote to memory of 944	536	dd99e2348f16ec768b9432e8b274889e782346d8ddbd13b521b09fe13f2afc71.exe	dd99e2348f16ec768b9432e8b274889e782346d8ddbd13b521b09fe13f2afc71.exe

C:\Users\Admin\AppData\Local\Temp\dd99e2348f16ec768b9432e8b274889e782346d8ddbd13b521b09fe13f2afc71.exe
"C:\Users\Admin\AppData\Local\Temp\dd99e2348f16ec768b9432e8b274889e782346d8ddbd13b521b09fe13f2afc71.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:536

C:\Users\Admin\AppData\Local\Temp\dd99e2348f16ec768b9432e8b274889e782346d8ddbd13b521b09fe13f2afc71.exe
tear
2⤵
PID:944

memory/536-54-0x0000000075BA1000-0x0000000075BA3000-memory.dmp

Filesize
8KB

Download
memory/536-57-0x0000000000400000-0x0000000000491000-memory.dmp

Filesize
580KB

Download
memory/944-55-0x0000000000000000-mapping.dmp

Download
memory/944-58-0x0000000000400000-0x0000000000491000-memory.dmp

Filesize
580KB

Download
memory/944-59-0x0000000000400000-0x0000000000491000-memory.dmp

Filesize
580KB

Download