d356f7e9182aefc3ac33b3309680ace90d4a782ae4e2a62711ef21fe50587385

Analysis

max time kernel
95s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 13:01

Target

d356f7e9182aefc3ac33b3309680ace90d4a782ae4e2a62711ef21fe50587385.exe
Size

524KB
MD5

f682871f45cd7de35927bf65c91c14a2
SHA1

60e50f2ad18e5206f74cc700931cdc8bc5a50d1b
SHA256

d356f7e9182aefc3ac33b3309680ace90d4a782ae4e2a62711ef21fe50587385
SHA512

a71954b872a17d9ec5d8ec80812746e48543d31cbe6a6fe58616d4c81f484e7c4321cab06a27d13d2107471095032b8ba7ae46a5729324213bab57ed1ef17a53
SSDEEP

6144:XZB1jNiCAePruNWiV3RqMGmX1EQroPfGfjUUFyaN7CECBZvBVF8X2Vx2FBa3Lm+v:XDzrPm5kfgjdyC+VzvBVKXCuapzDBG

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

d356f7e9182aefc3ac33b3309680ace90d4a782ae4e2a62711ef21fe50587385.exe

description	pid	process	target process
PID 5060 wrote to memory of 5028	5060	d356f7e9182aefc3ac33b3309680ace90d4a782ae4e2a62711ef21fe50587385.exe	d356f7e9182aefc3ac33b3309680ace90d4a782ae4e2a62711ef21fe50587385.exe
PID 5060 wrote to memory of 5028	5060	d356f7e9182aefc3ac33b3309680ace90d4a782ae4e2a62711ef21fe50587385.exe	d356f7e9182aefc3ac33b3309680ace90d4a782ae4e2a62711ef21fe50587385.exe
PID 5060 wrote to memory of 5028	5060	d356f7e9182aefc3ac33b3309680ace90d4a782ae4e2a62711ef21fe50587385.exe	d356f7e9182aefc3ac33b3309680ace90d4a782ae4e2a62711ef21fe50587385.exe

C:\Users\Admin\AppData\Local\Temp\d356f7e9182aefc3ac33b3309680ace90d4a782ae4e2a62711ef21fe50587385.exe
"C:\Users\Admin\AppData\Local\Temp\d356f7e9182aefc3ac33b3309680ace90d4a782ae4e2a62711ef21fe50587385.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5060

C:\Users\Admin\AppData\Local\Temp\d356f7e9182aefc3ac33b3309680ace90d4a782ae4e2a62711ef21fe50587385.exe
tear
2⤵
PID:5028

memory/5028-133-0x0000000000000000-mapping.dmp

Download
memory/5028-135-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/5028-136-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/5028-137-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/5028-138-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/5060-132-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/5060-134-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download