59a56a63056974bbd9c167dc844a1e8ad3e092ad6b53a29126731c8ab2a64b8d

Analysis

max time kernel
178s
max time network
190s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 12:13

Target

59a56a63056974bbd9c167dc844a1e8ad3e092ad6b53a29126731c8ab2a64b8d.exe
Size

521KB
MD5

e3c434b4f2153f8ba3b6779aac3c695a
SHA1

e89739ca2dc8c32eba9c3d2f623faad5b463bd8c
SHA256

59a56a63056974bbd9c167dc844a1e8ad3e092ad6b53a29126731c8ab2a64b8d
SHA512

825be0a1f32a061d99cddc07900388f614d3a46e64f183da5a68eb364254d2d50fa23fc77e1f91e1bf1e5588238dbf9cfb40463043f7cbdfab9f5a89fa4cba4e
SSDEEP

6144:vc8PpBMYl0AMH+xsdxHwu8rv5/scDg82tWVd65athQDvgdBW1Zy/3ODT5yeni7xL:NXluFWBrv5EAVFt3ORLni7iBhlDVJtRW

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

59a56a63056974bbd9c167dc844a1e8ad3e092ad6b53a29126731c8ab2a64b8d.exe

description	pid	process	target process
PID 1080 wrote to memory of 4240	1080	59a56a63056974bbd9c167dc844a1e8ad3e092ad6b53a29126731c8ab2a64b8d.exe	59a56a63056974bbd9c167dc844a1e8ad3e092ad6b53a29126731c8ab2a64b8d.exe
PID 1080 wrote to memory of 4240	1080	59a56a63056974bbd9c167dc844a1e8ad3e092ad6b53a29126731c8ab2a64b8d.exe	59a56a63056974bbd9c167dc844a1e8ad3e092ad6b53a29126731c8ab2a64b8d.exe
PID 1080 wrote to memory of 4240	1080	59a56a63056974bbd9c167dc844a1e8ad3e092ad6b53a29126731c8ab2a64b8d.exe	59a56a63056974bbd9c167dc844a1e8ad3e092ad6b53a29126731c8ab2a64b8d.exe

C:\Users\Admin\AppData\Local\Temp\59a56a63056974bbd9c167dc844a1e8ad3e092ad6b53a29126731c8ab2a64b8d.exe
"C:\Users\Admin\AppData\Local\Temp\59a56a63056974bbd9c167dc844a1e8ad3e092ad6b53a29126731c8ab2a64b8d.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1080

C:\Users\Admin\AppData\Local\Temp\59a56a63056974bbd9c167dc844a1e8ad3e092ad6b53a29126731c8ab2a64b8d.exe
tear
2⤵
PID:4240

memory/1080-133-0x0000000000400000-0x000000000048B000-memory.dmp

Filesize
556KB

Download
memory/4240-132-0x0000000000000000-mapping.dmp

Download
memory/4240-134-0x0000000000400000-0x000000000048B000-memory.dmp

Filesize
556KB

Download
memory/4240-135-0x0000000000400000-0x000000000048B000-memory.dmp

Filesize
556KB

Download