bf223a855aa1b5a6a4f21e8b14006a5a60853670aaf2cdd8331be9da371ce7f9

Analysis

max time kernel
9s
max time network
49s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
23-11-2022 13:13

Target

bf223a855aa1b5a6a4f21e8b14006a5a60853670aaf2cdd8331be9da371ce7f9.exe
Size

524KB
MD5

f5f50d067faec20ca65af4957c6480b8
SHA1

d50b144901a541618dfe7cbbd442da1b117604b4
SHA256

bf223a855aa1b5a6a4f21e8b14006a5a60853670aaf2cdd8331be9da371ce7f9
SHA512

67795e2684150b649604d90a400f1fbadd7df2485db3693fe36ba8f0058efa10cf7986826969719a387256b19b3ebf217cadfa95d10511cea1678c666a585d20
SSDEEP

12288:s7/M7WH63pbD8HeWfV2Hq93VzvBVKXCuapzDBGw6C:sG3pbYHeWfV2Hq93VzvSXCXDF

Score

1^/10

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

bf223a855aa1b5a6a4f21e8b14006a5a60853670aaf2cdd8331be9da371ce7f9.exe

description	pid	process	target process
PID 908 wrote to memory of 892	908	bf223a855aa1b5a6a4f21e8b14006a5a60853670aaf2cdd8331be9da371ce7f9.exe	bf223a855aa1b5a6a4f21e8b14006a5a60853670aaf2cdd8331be9da371ce7f9.exe
PID 908 wrote to memory of 892	908	bf223a855aa1b5a6a4f21e8b14006a5a60853670aaf2cdd8331be9da371ce7f9.exe	bf223a855aa1b5a6a4f21e8b14006a5a60853670aaf2cdd8331be9da371ce7f9.exe
PID 908 wrote to memory of 892	908	bf223a855aa1b5a6a4f21e8b14006a5a60853670aaf2cdd8331be9da371ce7f9.exe	bf223a855aa1b5a6a4f21e8b14006a5a60853670aaf2cdd8331be9da371ce7f9.exe
PID 908 wrote to memory of 892	908	bf223a855aa1b5a6a4f21e8b14006a5a60853670aaf2cdd8331be9da371ce7f9.exe	bf223a855aa1b5a6a4f21e8b14006a5a60853670aaf2cdd8331be9da371ce7f9.exe

C:\Users\Admin\AppData\Local\Temp\bf223a855aa1b5a6a4f21e8b14006a5a60853670aaf2cdd8331be9da371ce7f9.exe
"C:\Users\Admin\AppData\Local\Temp\bf223a855aa1b5a6a4f21e8b14006a5a60853670aaf2cdd8331be9da371ce7f9.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:908
- C:\Users\Admin\AppData\Local\Temp\bf223a855aa1b5a6a4f21e8b14006a5a60853670aaf2cdd8331be9da371ce7f9.exe
  tear
  2⤵
  PID:892

memory/892-55-0x0000000000000000-mapping.dmp

Download
memory/892-57-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/892-59-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/892-60-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/908-54-0x00000000758C1000-0x00000000758C3000-memory.dmp

Filesize
8KB

Download
memory/908-56-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download