dd3104834e401a784f0b0c7c16430227c6df77727daa5de43463985cab0bfccc

Analysis

max time kernel
34s
max time network
47s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
23-11-2022 12:55

Target

dd3104834e401a784f0b0c7c16430227c6df77727daa5de43463985cab0bfccc.exe
Size

524KB
MD5

9fc57bc475e77cc17bef45e89f841318
SHA1

4e39dcac6b55de60aff3df2ea0c9defa55b493f3
SHA256

dd3104834e401a784f0b0c7c16430227c6df77727daa5de43463985cab0bfccc
SHA512

7725607653e2ba4193b8c1e3bcc31be9c245a0215cee4f0df001e9acad49b18e7c85965ab2a6d0d3980c3ded226870b05da91ae65e236e100ea3a7b48954d504
SSDEEP

12288:bq6hg83QetVfB45NtwUxVzvBVKXCuapzDBG:393QANmNtDxVzvSXCXD

Score

1^/10

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

dd3104834e401a784f0b0c7c16430227c6df77727daa5de43463985cab0bfccc.exe

description	pid	process	target process
PID 780 wrote to memory of 316	780	dd3104834e401a784f0b0c7c16430227c6df77727daa5de43463985cab0bfccc.exe	dd3104834e401a784f0b0c7c16430227c6df77727daa5de43463985cab0bfccc.exe
PID 780 wrote to memory of 316	780	dd3104834e401a784f0b0c7c16430227c6df77727daa5de43463985cab0bfccc.exe	dd3104834e401a784f0b0c7c16430227c6df77727daa5de43463985cab0bfccc.exe
PID 780 wrote to memory of 316	780	dd3104834e401a784f0b0c7c16430227c6df77727daa5de43463985cab0bfccc.exe	dd3104834e401a784f0b0c7c16430227c6df77727daa5de43463985cab0bfccc.exe
PID 780 wrote to memory of 316	780	dd3104834e401a784f0b0c7c16430227c6df77727daa5de43463985cab0bfccc.exe	dd3104834e401a784f0b0c7c16430227c6df77727daa5de43463985cab0bfccc.exe

C:\Users\Admin\AppData\Local\Temp\dd3104834e401a784f0b0c7c16430227c6df77727daa5de43463985cab0bfccc.exe
"C:\Users\Admin\AppData\Local\Temp\dd3104834e401a784f0b0c7c16430227c6df77727daa5de43463985cab0bfccc.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:780

C:\Users\Admin\AppData\Local\Temp\dd3104834e401a784f0b0c7c16430227c6df77727daa5de43463985cab0bfccc.exe
tear
2⤵
PID:316

memory/316-56-0x0000000000000000-mapping.dmp

Download
memory/316-59-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/316-60-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/780-54-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/780-55-0x0000000076121000-0x0000000076123000-memory.dmp

Filesize
8KB

Download
memory/780-57-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download