eed8eaf387593a016031f82d44e8229ae08fb84fd91e2ec0f04d6df27c30b6b1

Analysis

max time kernel
163s
max time network
177s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 12:45

Target

eed8eaf387593a016031f82d44e8229ae08fb84fd91e2ec0f04d6df27c30b6b1.exe
Size

524KB
MD5

3fed79ae6313adb095e507e9de834a4c
SHA1

ca2a4ecce855561b00c33bf11520c0571cffca16
SHA256

eed8eaf387593a016031f82d44e8229ae08fb84fd91e2ec0f04d6df27c30b6b1
SHA512

e922a9b328ba44255564a4e906925061225e6a035b3ce185538c8bf4bbfaf04beb8ace27de858a0f5877a186c251ebd02a88c2d3bec3a6cc5cece22a06f11377
SSDEEP

12288:RTAz92Z4YiM2VB2A82/qpVzvBVKXCuapzDBGF:RSQ2BJ8UgVzvSXCXDe

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

eed8eaf387593a016031f82d44e8229ae08fb84fd91e2ec0f04d6df27c30b6b1.exe

description	pid	process	target process
PID 1672 wrote to memory of 2112	1672	eed8eaf387593a016031f82d44e8229ae08fb84fd91e2ec0f04d6df27c30b6b1.exe	eed8eaf387593a016031f82d44e8229ae08fb84fd91e2ec0f04d6df27c30b6b1.exe
PID 1672 wrote to memory of 2112	1672	eed8eaf387593a016031f82d44e8229ae08fb84fd91e2ec0f04d6df27c30b6b1.exe	eed8eaf387593a016031f82d44e8229ae08fb84fd91e2ec0f04d6df27c30b6b1.exe
PID 1672 wrote to memory of 2112	1672	eed8eaf387593a016031f82d44e8229ae08fb84fd91e2ec0f04d6df27c30b6b1.exe	eed8eaf387593a016031f82d44e8229ae08fb84fd91e2ec0f04d6df27c30b6b1.exe

C:\Users\Admin\AppData\Local\Temp\eed8eaf387593a016031f82d44e8229ae08fb84fd91e2ec0f04d6df27c30b6b1.exe
"C:\Users\Admin\AppData\Local\Temp\eed8eaf387593a016031f82d44e8229ae08fb84fd91e2ec0f04d6df27c30b6b1.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1672
- C:\Users\Admin\AppData\Local\Temp\eed8eaf387593a016031f82d44e8229ae08fb84fd91e2ec0f04d6df27c30b6b1.exe
  tear
  2⤵
  PID:2112

memory/1672-132-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/1672-134-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/2112-133-0x0000000000000000-mapping.dmp

Download
memory/2112-135-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/2112-136-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download