f6d2ad692914e7664ea86bd9edc1701019a559042355967f952ec77a86570711

Analysis

max time kernel
90s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 12:40

Target

f6d2ad692914e7664ea86bd9edc1701019a559042355967f952ec77a86570711.exe
Size

524KB
MD5

cd72cc456eb9d3db2e665254f1c63385
SHA1

39d1dd83185825c7398156b2de25470a30e9c750
SHA256

f6d2ad692914e7664ea86bd9edc1701019a559042355967f952ec77a86570711
SHA512

7dac06ef16c14b4a2a30379474cf16fb7a32f60416d3373f06fa1b1534562b3cfd7a9d41394caaa2b147cd18f5d340396e308399a7a9f6b287e777f52003c152
SSDEEP

12288:wn1KkyaUgoLPGVYmpQao3VzvBVKXCuapzDBG:g1e/gSuVYMLqVzvSXCXD

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

f6d2ad692914e7664ea86bd9edc1701019a559042355967f952ec77a86570711.exe

description	pid	process	target process
PID 392 wrote to memory of 4932	392	f6d2ad692914e7664ea86bd9edc1701019a559042355967f952ec77a86570711.exe	f6d2ad692914e7664ea86bd9edc1701019a559042355967f952ec77a86570711.exe
PID 392 wrote to memory of 4932	392	f6d2ad692914e7664ea86bd9edc1701019a559042355967f952ec77a86570711.exe	f6d2ad692914e7664ea86bd9edc1701019a559042355967f952ec77a86570711.exe
PID 392 wrote to memory of 4932	392	f6d2ad692914e7664ea86bd9edc1701019a559042355967f952ec77a86570711.exe	f6d2ad692914e7664ea86bd9edc1701019a559042355967f952ec77a86570711.exe

C:\Users\Admin\AppData\Local\Temp\f6d2ad692914e7664ea86bd9edc1701019a559042355967f952ec77a86570711.exe
"C:\Users\Admin\AppData\Local\Temp\f6d2ad692914e7664ea86bd9edc1701019a559042355967f952ec77a86570711.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:392

C:\Users\Admin\AppData\Local\Temp\f6d2ad692914e7664ea86bd9edc1701019a559042355967f952ec77a86570711.exe
tear
2⤵
PID:4932

memory/392-132-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/392-133-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/392-135-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/4932-134-0x0000000000000000-mapping.dmp

Download
memory/4932-136-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/4932-137-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/4932-138-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/4932-139-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/4932-140-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download