8bf1d8ef3b0141083a3353815edb836b43c10c56a2a604082e29153ae05fef6b

Analysis

max time kernel
158s
max time network
165s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 13:43

Target

8bf1d8ef3b0141083a3353815edb836b43c10c56a2a604082e29153ae05fef6b.exe
Size

524KB
MD5

9543ae45dd84f0f784e8d7184846948d
SHA1

5f9e5041d8b933c1e1b1de86fe72139e7bee0705
SHA256

8bf1d8ef3b0141083a3353815edb836b43c10c56a2a604082e29153ae05fef6b
SHA512

e21be936fbfb069551d768670e70e10671bd66508cb15e2ea2b9fff26897f349af03d5b1be3b78a138086448acd121dfe0e18a2e1635f53a89ff1b7d440501ed
SSDEEP

6144:iixRwsiTkupG84x1C08QRBhckJCECBZvBVF8X2Vx2FBa3Lm+dpHB3SMBGbkEcqW:LmF071vnSFVzvBVKXCuapzDBG7

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

8bf1d8ef3b0141083a3353815edb836b43c10c56a2a604082e29153ae05fef6b.exe

description	pid	process	target process
PID 2764 wrote to memory of 3588	2764	8bf1d8ef3b0141083a3353815edb836b43c10c56a2a604082e29153ae05fef6b.exe	8bf1d8ef3b0141083a3353815edb836b43c10c56a2a604082e29153ae05fef6b.exe
PID 2764 wrote to memory of 3588	2764	8bf1d8ef3b0141083a3353815edb836b43c10c56a2a604082e29153ae05fef6b.exe	8bf1d8ef3b0141083a3353815edb836b43c10c56a2a604082e29153ae05fef6b.exe
PID 2764 wrote to memory of 3588	2764	8bf1d8ef3b0141083a3353815edb836b43c10c56a2a604082e29153ae05fef6b.exe	8bf1d8ef3b0141083a3353815edb836b43c10c56a2a604082e29153ae05fef6b.exe

C:\Users\Admin\AppData\Local\Temp\8bf1d8ef3b0141083a3353815edb836b43c10c56a2a604082e29153ae05fef6b.exe
"C:\Users\Admin\AppData\Local\Temp\8bf1d8ef3b0141083a3353815edb836b43c10c56a2a604082e29153ae05fef6b.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2764

C:\Users\Admin\AppData\Local\Temp\8bf1d8ef3b0141083a3353815edb836b43c10c56a2a604082e29153ae05fef6b.exe
tear
2⤵
PID:3588

memory/2764-132-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/2764-133-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/2764-135-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/3588-134-0x0000000000000000-mapping.dmp

Download
memory/3588-136-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/3588-137-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/3588-138-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download