dcc00e8b8f425e55e95490ac049b1b0cc770556ace34229017061365f3b1077d

Analysis

max time kernel
36s
max time network
81s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
23-11-2022 12:56

Target

dcc00e8b8f425e55e95490ac049b1b0cc770556ace34229017061365f3b1077d.exe
Size

524KB
MD5

6148060a552412e605c661308fc04a3f
SHA1

c94cbff89fa730f363fe70af7be350af2c30b530
SHA256

dcc00e8b8f425e55e95490ac049b1b0cc770556ace34229017061365f3b1077d
SHA512

f6b1fc5d9d1300398af58ed1c3d20a5114de886ab3d1ca4b44b6506ff7c3695556cf401ff957107db3385a20f305a9c9cb9be0dbde994bcd3e6b7647a465ec9b
SSDEEP

6144:BNI+bybdAa8HV/9z7v2TS1Jpj8BDyqPy//2cAAS2bCHZGPCECBZvBVF8X2Vx2FBh:8qNzvd8e/7skKVzvBVKXCuapzDBG

Score

1^/10

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

dcc00e8b8f425e55e95490ac049b1b0cc770556ace34229017061365f3b1077d.exe

description	pid	process	target process
PID 1440 wrote to memory of 1392	1440	dcc00e8b8f425e55e95490ac049b1b0cc770556ace34229017061365f3b1077d.exe	dcc00e8b8f425e55e95490ac049b1b0cc770556ace34229017061365f3b1077d.exe
PID 1440 wrote to memory of 1392	1440	dcc00e8b8f425e55e95490ac049b1b0cc770556ace34229017061365f3b1077d.exe	dcc00e8b8f425e55e95490ac049b1b0cc770556ace34229017061365f3b1077d.exe
PID 1440 wrote to memory of 1392	1440	dcc00e8b8f425e55e95490ac049b1b0cc770556ace34229017061365f3b1077d.exe	dcc00e8b8f425e55e95490ac049b1b0cc770556ace34229017061365f3b1077d.exe
PID 1440 wrote to memory of 1392	1440	dcc00e8b8f425e55e95490ac049b1b0cc770556ace34229017061365f3b1077d.exe	dcc00e8b8f425e55e95490ac049b1b0cc770556ace34229017061365f3b1077d.exe

C:\Users\Admin\AppData\Local\Temp\dcc00e8b8f425e55e95490ac049b1b0cc770556ace34229017061365f3b1077d.exe
"C:\Users\Admin\AppData\Local\Temp\dcc00e8b8f425e55e95490ac049b1b0cc770556ace34229017061365f3b1077d.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1440

C:\Users\Admin\AppData\Local\Temp\dcc00e8b8f425e55e95490ac049b1b0cc770556ace34229017061365f3b1077d.exe
tear
2⤵
PID:1392

memory/1392-55-0x0000000000000000-mapping.dmp

Download
memory/1392-58-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/1392-59-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/1440-54-0x00000000766F1000-0x00000000766F3000-memory.dmp

Filesize
8KB

Download
memory/1440-56-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download