dcc00e8b8f425e55e95490ac049b1b0cc770556ace34229017061365f3b1077d

Analysis

max time kernel
205s
max time network
216s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 12:56

Target

dcc00e8b8f425e55e95490ac049b1b0cc770556ace34229017061365f3b1077d.exe
Size

524KB
MD5

6148060a552412e605c661308fc04a3f
SHA1

c94cbff89fa730f363fe70af7be350af2c30b530
SHA256

dcc00e8b8f425e55e95490ac049b1b0cc770556ace34229017061365f3b1077d
SHA512

f6b1fc5d9d1300398af58ed1c3d20a5114de886ab3d1ca4b44b6506ff7c3695556cf401ff957107db3385a20f305a9c9cb9be0dbde994bcd3e6b7647a465ec9b
SSDEEP

6144:BNI+bybdAa8HV/9z7v2TS1Jpj8BDyqPy//2cAAS2bCHZGPCECBZvBVF8X2Vx2FBh:8qNzvd8e/7skKVzvBVKXCuapzDBG

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

dcc00e8b8f425e55e95490ac049b1b0cc770556ace34229017061365f3b1077d.exe

description	pid	process	target process
PID 3184 wrote to memory of 4564	3184	dcc00e8b8f425e55e95490ac049b1b0cc770556ace34229017061365f3b1077d.exe	dcc00e8b8f425e55e95490ac049b1b0cc770556ace34229017061365f3b1077d.exe
PID 3184 wrote to memory of 4564	3184	dcc00e8b8f425e55e95490ac049b1b0cc770556ace34229017061365f3b1077d.exe	dcc00e8b8f425e55e95490ac049b1b0cc770556ace34229017061365f3b1077d.exe
PID 3184 wrote to memory of 4564	3184	dcc00e8b8f425e55e95490ac049b1b0cc770556ace34229017061365f3b1077d.exe	dcc00e8b8f425e55e95490ac049b1b0cc770556ace34229017061365f3b1077d.exe

C:\Users\Admin\AppData\Local\Temp\dcc00e8b8f425e55e95490ac049b1b0cc770556ace34229017061365f3b1077d.exe
"C:\Users\Admin\AppData\Local\Temp\dcc00e8b8f425e55e95490ac049b1b0cc770556ace34229017061365f3b1077d.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3184

C:\Users\Admin\AppData\Local\Temp\dcc00e8b8f425e55e95490ac049b1b0cc770556ace34229017061365f3b1077d.exe
tear
2⤵
PID:4564

memory/3184-132-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/3184-134-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/4564-133-0x0000000000000000-mapping.dmp

Download
memory/4564-135-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/4564-136-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/4564-137-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download