dd3104834e401a784f0b0c7c16430227c6df77727daa5de43463985cab0bfccc

Analysis

max time kernel
145s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 12:55

Target

dd3104834e401a784f0b0c7c16430227c6df77727daa5de43463985cab0bfccc.exe
Size

524KB
MD5

9fc57bc475e77cc17bef45e89f841318
SHA1

4e39dcac6b55de60aff3df2ea0c9defa55b493f3
SHA256

dd3104834e401a784f0b0c7c16430227c6df77727daa5de43463985cab0bfccc
SHA512

7725607653e2ba4193b8c1e3bcc31be9c245a0215cee4f0df001e9acad49b18e7c85965ab2a6d0d3980c3ded226870b05da91ae65e236e100ea3a7b48954d504
SSDEEP

12288:bq6hg83QetVfB45NtwUxVzvBVKXCuapzDBG:393QANmNtDxVzvSXCXD

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

dd3104834e401a784f0b0c7c16430227c6df77727daa5de43463985cab0bfccc.exe

description	pid	process	target process
PID 4696 wrote to memory of 4952	4696	dd3104834e401a784f0b0c7c16430227c6df77727daa5de43463985cab0bfccc.exe	dd3104834e401a784f0b0c7c16430227c6df77727daa5de43463985cab0bfccc.exe
PID 4696 wrote to memory of 4952	4696	dd3104834e401a784f0b0c7c16430227c6df77727daa5de43463985cab0bfccc.exe	dd3104834e401a784f0b0c7c16430227c6df77727daa5de43463985cab0bfccc.exe
PID 4696 wrote to memory of 4952	4696	dd3104834e401a784f0b0c7c16430227c6df77727daa5de43463985cab0bfccc.exe	dd3104834e401a784f0b0c7c16430227c6df77727daa5de43463985cab0bfccc.exe

C:\Users\Admin\AppData\Local\Temp\dd3104834e401a784f0b0c7c16430227c6df77727daa5de43463985cab0bfccc.exe
"C:\Users\Admin\AppData\Local\Temp\dd3104834e401a784f0b0c7c16430227c6df77727daa5de43463985cab0bfccc.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4696

C:\Users\Admin\AppData\Local\Temp\dd3104834e401a784f0b0c7c16430227c6df77727daa5de43463985cab0bfccc.exe
tear
2⤵
PID:4952

memory/4696-132-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/4696-134-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/4952-133-0x0000000000000000-mapping.dmp

Download
memory/4952-135-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/4952-136-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/4952-137-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download