2d1eeb94481e2b6edc684689ae510201ab7a25a9fe204d700cdd354ee0de5cb6

Analysis

max time kernel
164s
max time network
183s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 12:19

Target

2d1eeb94481e2b6edc684689ae510201ab7a25a9fe204d700cdd354ee0de5cb6.exe
Size

522KB
MD5

c667cb7056145d7c47a0e643e4dbcba9
SHA1

c70938bd752ace048d789e1b7764b1a326d2575f
SHA256

2d1eeb94481e2b6edc684689ae510201ab7a25a9fe204d700cdd354ee0de5cb6
SHA512

a2acf3b62d4868b46b69e6a92d12b58667bca359e76388b4ca891280e4fce09a2e76ef4f2ebac1a12630ae202134490eee56175b659c524fb349104a4448d295
SSDEEP

12288:vxWfQdvsJcIXRBt2J98KuewYYlLPt5oKnWq3ibI:0EvsJcsCAvlLPt5/WnI

Score

1^/10

Suspicious use of WriteProcessMemory 6 IoCs

Processes:

2d1eeb94481e2b6edc684689ae510201ab7a25a9fe204d700cdd354ee0de5cb6.exe

description	pid	process	target process
PID 720 wrote to memory of 996	720	2d1eeb94481e2b6edc684689ae510201ab7a25a9fe204d700cdd354ee0de5cb6.exe	2d1eeb94481e2b6edc684689ae510201ab7a25a9fe204d700cdd354ee0de5cb6.exe
PID 720 wrote to memory of 996	720	2d1eeb94481e2b6edc684689ae510201ab7a25a9fe204d700cdd354ee0de5cb6.exe	2d1eeb94481e2b6edc684689ae510201ab7a25a9fe204d700cdd354ee0de5cb6.exe
PID 720 wrote to memory of 996	720	2d1eeb94481e2b6edc684689ae510201ab7a25a9fe204d700cdd354ee0de5cb6.exe	2d1eeb94481e2b6edc684689ae510201ab7a25a9fe204d700cdd354ee0de5cb6.exe
PID 720 wrote to memory of 3532	720	2d1eeb94481e2b6edc684689ae510201ab7a25a9fe204d700cdd354ee0de5cb6.exe	2d1eeb94481e2b6edc684689ae510201ab7a25a9fe204d700cdd354ee0de5cb6.exe
PID 720 wrote to memory of 3532	720	2d1eeb94481e2b6edc684689ae510201ab7a25a9fe204d700cdd354ee0de5cb6.exe	2d1eeb94481e2b6edc684689ae510201ab7a25a9fe204d700cdd354ee0de5cb6.exe
PID 720 wrote to memory of 3532	720	2d1eeb94481e2b6edc684689ae510201ab7a25a9fe204d700cdd354ee0de5cb6.exe	2d1eeb94481e2b6edc684689ae510201ab7a25a9fe204d700cdd354ee0de5cb6.exe

C:\Users\Admin\AppData\Local\Temp\2d1eeb94481e2b6edc684689ae510201ab7a25a9fe204d700cdd354ee0de5cb6.exe
"C:\Users\Admin\AppData\Local\Temp\2d1eeb94481e2b6edc684689ae510201ab7a25a9fe204d700cdd354ee0de5cb6.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:720

C:\Users\Admin\AppData\Local\Temp\2d1eeb94481e2b6edc684689ae510201ab7a25a9fe204d700cdd354ee0de5cb6.exe
start
2⤵
PID:996

C:\Users\Admin\AppData\Local\Temp\2d1eeb94481e2b6edc684689ae510201ab7a25a9fe204d700cdd354ee0de5cb6.exe
watch
2⤵
PID:3532

memory/720-134-0x0000000000400000-0x000000000048B000-memory.dmp

Filesize
556KB

Download
memory/996-133-0x0000000000000000-mapping.dmp

Download
memory/996-135-0x0000000000400000-0x000000000048B000-memory.dmp

Filesize
556KB

Download
memory/996-137-0x0000000000400000-0x000000000048B000-memory.dmp

Filesize
556KB

Download
memory/3532-132-0x0000000000000000-mapping.dmp

Download
memory/3532-136-0x0000000000400000-0x000000000048B000-memory.dmp

Filesize
556KB

Download
memory/3532-138-0x0000000000400000-0x000000000048B000-memory.dmp

Filesize
556KB

Download