d8b2f7c2ba963272e56981e470ac7140b021d3a891453078f53f76ae8a30198a

Analysis

max time kernel
145s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 12:58

Target

d8b2f7c2ba963272e56981e470ac7140b021d3a891453078f53f76ae8a30198a.exe
Size

524KB
MD5

124bf0e4fad9ddefcddf9a3bfa8c6055
SHA1

3eb6fbe961a15a566d1b83ce589cedfc8b4e5e52
SHA256

d8b2f7c2ba963272e56981e470ac7140b021d3a891453078f53f76ae8a30198a
SHA512

6df0117a7e4f490a477dc30a32e44e1cfb90834680d3182d8d62c2fe8347c39d7645dafbda24b5dea4c962ddb6caf871f58756e856160fded8c9ab123410c58b
SSDEEP

12288:OK/IdE6jeCyFx9h8XTmVVzvBVKXCuapzDBG:OKmEoLyFxT6AVzvSXCXD

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

d8b2f7c2ba963272e56981e470ac7140b021d3a891453078f53f76ae8a30198a.exe

description	pid	process	target process
PID 4532 wrote to memory of 4892	4532	d8b2f7c2ba963272e56981e470ac7140b021d3a891453078f53f76ae8a30198a.exe	d8b2f7c2ba963272e56981e470ac7140b021d3a891453078f53f76ae8a30198a.exe
PID 4532 wrote to memory of 4892	4532	d8b2f7c2ba963272e56981e470ac7140b021d3a891453078f53f76ae8a30198a.exe	d8b2f7c2ba963272e56981e470ac7140b021d3a891453078f53f76ae8a30198a.exe
PID 4532 wrote to memory of 4892	4532	d8b2f7c2ba963272e56981e470ac7140b021d3a891453078f53f76ae8a30198a.exe	d8b2f7c2ba963272e56981e470ac7140b021d3a891453078f53f76ae8a30198a.exe

C:\Users\Admin\AppData\Local\Temp\d8b2f7c2ba963272e56981e470ac7140b021d3a891453078f53f76ae8a30198a.exe
"C:\Users\Admin\AppData\Local\Temp\d8b2f7c2ba963272e56981e470ac7140b021d3a891453078f53f76ae8a30198a.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4532

C:\Users\Admin\AppData\Local\Temp\d8b2f7c2ba963272e56981e470ac7140b021d3a891453078f53f76ae8a30198a.exe
tear
2⤵
PID:4892

memory/4532-132-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/4532-134-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/4892-133-0x0000000000000000-mapping.dmp

Download
memory/4892-135-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/4892-136-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/4892-137-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download