f9b6fc27314019d20cc45733e7fbf4793efd99adb66223850b73cbf6625161cb

Analysis

max time kernel
181s
max time network
188s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 12:39

Target

f9b6fc27314019d20cc45733e7fbf4793efd99adb66223850b73cbf6625161cb.exe
Size

524KB
MD5

c1c97eca115dd06792749ad0dc88b25e
SHA1

400eca2848462afa1058ba2d967e553d85bfa890
SHA256

f9b6fc27314019d20cc45733e7fbf4793efd99adb66223850b73cbf6625161cb
SHA512

cc25b6699b677d46388488dad478890daf7b17862cf699e581438911568d703ae285e51ea8465b7c8cb377d4a57a501c5167ae5ab478a759c34c82ec3287cf4c
SSDEEP

12288:Xw//VCD5vnKNF57YwVzvBVKXCuapzDBG:XfvKF9DVzvSXCXD

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

f9b6fc27314019d20cc45733e7fbf4793efd99adb66223850b73cbf6625161cb.exe

description	pid	process	target process
PID 4924 wrote to memory of 4532	4924	f9b6fc27314019d20cc45733e7fbf4793efd99adb66223850b73cbf6625161cb.exe	f9b6fc27314019d20cc45733e7fbf4793efd99adb66223850b73cbf6625161cb.exe
PID 4924 wrote to memory of 4532	4924	f9b6fc27314019d20cc45733e7fbf4793efd99adb66223850b73cbf6625161cb.exe	f9b6fc27314019d20cc45733e7fbf4793efd99adb66223850b73cbf6625161cb.exe
PID 4924 wrote to memory of 4532	4924	f9b6fc27314019d20cc45733e7fbf4793efd99adb66223850b73cbf6625161cb.exe	f9b6fc27314019d20cc45733e7fbf4793efd99adb66223850b73cbf6625161cb.exe

C:\Users\Admin\AppData\Local\Temp\f9b6fc27314019d20cc45733e7fbf4793efd99adb66223850b73cbf6625161cb.exe
"C:\Users\Admin\AppData\Local\Temp\f9b6fc27314019d20cc45733e7fbf4793efd99adb66223850b73cbf6625161cb.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4924
- C:\Users\Admin\AppData\Local\Temp\f9b6fc27314019d20cc45733e7fbf4793efd99adb66223850b73cbf6625161cb.exe
  tear
  2⤵
  PID:4532

memory/4532-133-0x0000000000000000-mapping.dmp

Download
memory/4532-135-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/4532-136-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/4924-132-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/4924-134-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download