f9b6fc27314019d20cc45733e7fbf4793efd99adb66223850b73cbf6625161cb

Analysis

max time kernel
42s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
23-11-2022 12:39

Target

f9b6fc27314019d20cc45733e7fbf4793efd99adb66223850b73cbf6625161cb.exe
Size

524KB
MD5

c1c97eca115dd06792749ad0dc88b25e
SHA1

400eca2848462afa1058ba2d967e553d85bfa890
SHA256

f9b6fc27314019d20cc45733e7fbf4793efd99adb66223850b73cbf6625161cb
SHA512

cc25b6699b677d46388488dad478890daf7b17862cf699e581438911568d703ae285e51ea8465b7c8cb377d4a57a501c5167ae5ab478a759c34c82ec3287cf4c
SSDEEP

12288:Xw//VCD5vnKNF57YwVzvBVKXCuapzDBG:XfvKF9DVzvSXCXD

Score

1^/10

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

f9b6fc27314019d20cc45733e7fbf4793efd99adb66223850b73cbf6625161cb.exe

description	pid	process	target process
PID 1996 wrote to memory of 1912	1996	f9b6fc27314019d20cc45733e7fbf4793efd99adb66223850b73cbf6625161cb.exe	f9b6fc27314019d20cc45733e7fbf4793efd99adb66223850b73cbf6625161cb.exe
PID 1996 wrote to memory of 1912	1996	f9b6fc27314019d20cc45733e7fbf4793efd99adb66223850b73cbf6625161cb.exe	f9b6fc27314019d20cc45733e7fbf4793efd99adb66223850b73cbf6625161cb.exe
PID 1996 wrote to memory of 1912	1996	f9b6fc27314019d20cc45733e7fbf4793efd99adb66223850b73cbf6625161cb.exe	f9b6fc27314019d20cc45733e7fbf4793efd99adb66223850b73cbf6625161cb.exe
PID 1996 wrote to memory of 1912	1996	f9b6fc27314019d20cc45733e7fbf4793efd99adb66223850b73cbf6625161cb.exe	f9b6fc27314019d20cc45733e7fbf4793efd99adb66223850b73cbf6625161cb.exe

C:\Users\Admin\AppData\Local\Temp\f9b6fc27314019d20cc45733e7fbf4793efd99adb66223850b73cbf6625161cb.exe
"C:\Users\Admin\AppData\Local\Temp\f9b6fc27314019d20cc45733e7fbf4793efd99adb66223850b73cbf6625161cb.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1996
- C:\Users\Admin\AppData\Local\Temp\f9b6fc27314019d20cc45733e7fbf4793efd99adb66223850b73cbf6625161cb.exe
  tear
  2⤵
  PID:1912

memory/1912-55-0x0000000000000000-mapping.dmp

Download
memory/1912-57-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/1912-59-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/1912-60-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/1996-54-0x0000000076031000-0x0000000076033000-memory.dmp

Filesize
8KB

Download
memory/1996-56-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download