bf223a855aa1b5a6a4f21e8b14006a5a60853670aaf2cdd8331be9da371ce7f9

Analysis

max time kernel
148s
max time network
186s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 13:13

Target

bf223a855aa1b5a6a4f21e8b14006a5a60853670aaf2cdd8331be9da371ce7f9.exe
Size

524KB
MD5

f5f50d067faec20ca65af4957c6480b8
SHA1

d50b144901a541618dfe7cbbd442da1b117604b4
SHA256

bf223a855aa1b5a6a4f21e8b14006a5a60853670aaf2cdd8331be9da371ce7f9
SHA512

67795e2684150b649604d90a400f1fbadd7df2485db3693fe36ba8f0058efa10cf7986826969719a387256b19b3ebf217cadfa95d10511cea1678c666a585d20
SSDEEP

12288:s7/M7WH63pbD8HeWfV2Hq93VzvBVKXCuapzDBGw6C:sG3pbYHeWfV2Hq93VzvSXCXDF

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

bf223a855aa1b5a6a4f21e8b14006a5a60853670aaf2cdd8331be9da371ce7f9.exe

description	pid	process	target process
PID 1200 wrote to memory of 1248	1200	bf223a855aa1b5a6a4f21e8b14006a5a60853670aaf2cdd8331be9da371ce7f9.exe	bf223a855aa1b5a6a4f21e8b14006a5a60853670aaf2cdd8331be9da371ce7f9.exe
PID 1200 wrote to memory of 1248	1200	bf223a855aa1b5a6a4f21e8b14006a5a60853670aaf2cdd8331be9da371ce7f9.exe	bf223a855aa1b5a6a4f21e8b14006a5a60853670aaf2cdd8331be9da371ce7f9.exe
PID 1200 wrote to memory of 1248	1200	bf223a855aa1b5a6a4f21e8b14006a5a60853670aaf2cdd8331be9da371ce7f9.exe	bf223a855aa1b5a6a4f21e8b14006a5a60853670aaf2cdd8331be9da371ce7f9.exe

C:\Users\Admin\AppData\Local\Temp\bf223a855aa1b5a6a4f21e8b14006a5a60853670aaf2cdd8331be9da371ce7f9.exe
"C:\Users\Admin\AppData\Local\Temp\bf223a855aa1b5a6a4f21e8b14006a5a60853670aaf2cdd8331be9da371ce7f9.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1200
- C:\Users\Admin\AppData\Local\Temp\bf223a855aa1b5a6a4f21e8b14006a5a60853670aaf2cdd8331be9da371ce7f9.exe
  tear
  2⤵
  PID:1248

memory/1200-132-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/1200-134-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/1248-133-0x0000000000000000-mapping.dmp

Download
memory/1248-135-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/1248-136-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/1248-137-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/1248-138-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download