dd99e2348f16ec768b9432e8b274889e782346d8ddbd13b521b09fe13f2afc71

Analysis

max time kernel
150s
max time network
165s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 12:55

Target

dd99e2348f16ec768b9432e8b274889e782346d8ddbd13b521b09fe13f2afc71.exe
Size

532KB
MD5

6bfaa0c25401bedd608f240a8ed5361e
SHA1

de5562f3bef98fbfad7fb74df8ecebdae38215e0
SHA256

dd99e2348f16ec768b9432e8b274889e782346d8ddbd13b521b09fe13f2afc71
SHA512

7caa4d98085c3c76b7b490251eafb6a5c961ef8586d1d9518a202932627a27834ff472dbd1cdefa961896df04bb1abbbb1d69248cde5d43bf3864de119ef3f53
SSDEEP

12288:MW5FdwiiQcxD5XUbsASPh2RIbWcoIFFEgB9nP1pk:/57wpRxDNUbOp0IbWcoIFagbPHk

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

dd99e2348f16ec768b9432e8b274889e782346d8ddbd13b521b09fe13f2afc71.exe

description	pid	process	target process
PID 4916 wrote to memory of 5084	4916	dd99e2348f16ec768b9432e8b274889e782346d8ddbd13b521b09fe13f2afc71.exe	dd99e2348f16ec768b9432e8b274889e782346d8ddbd13b521b09fe13f2afc71.exe
PID 4916 wrote to memory of 5084	4916	dd99e2348f16ec768b9432e8b274889e782346d8ddbd13b521b09fe13f2afc71.exe	dd99e2348f16ec768b9432e8b274889e782346d8ddbd13b521b09fe13f2afc71.exe
PID 4916 wrote to memory of 5084	4916	dd99e2348f16ec768b9432e8b274889e782346d8ddbd13b521b09fe13f2afc71.exe	dd99e2348f16ec768b9432e8b274889e782346d8ddbd13b521b09fe13f2afc71.exe

C:\Users\Admin\AppData\Local\Temp\dd99e2348f16ec768b9432e8b274889e782346d8ddbd13b521b09fe13f2afc71.exe
"C:\Users\Admin\AppData\Local\Temp\dd99e2348f16ec768b9432e8b274889e782346d8ddbd13b521b09fe13f2afc71.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4916

C:\Users\Admin\AppData\Local\Temp\dd99e2348f16ec768b9432e8b274889e782346d8ddbd13b521b09fe13f2afc71.exe
tear
2⤵
PID:5084

memory/4916-133-0x0000000000400000-0x0000000000491000-memory.dmp

Filesize
580KB

Download
memory/5084-132-0x0000000000000000-mapping.dmp

Download
memory/5084-134-0x0000000000400000-0x0000000000491000-memory.dmp

Filesize
580KB

Download
memory/5084-135-0x0000000000400000-0x0000000000491000-memory.dmp

Filesize
580KB

Download