c0ba04e2ab3a018bf3b9cda4435c477f9ae44a2c6b5d22996f5823dd2a13fd4b

Analysis

max time kernel
121s
max time network
135s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 13:12

Target

c0ba04e2ab3a018bf3b9cda4435c477f9ae44a2c6b5d22996f5823dd2a13fd4b.exe
Size

524KB
MD5

24750ebb3feafdfdf787d45c47510050
SHA1

80ac7e556a09a1ed1095fd73efb3f19bc60f993d
SHA256

c0ba04e2ab3a018bf3b9cda4435c477f9ae44a2c6b5d22996f5823dd2a13fd4b
SHA512

e2d29f72ff5ecce4ff8fc7206532103bdd217cc4f643be8e71b0adadd9ce2d924fe179e658ad7bd8df0310ef5e3cf64c9dcc98ebdc720b6fa71b99c3eb8bdedd
SSDEEP

12288:b325RheToxYzr2G0hJ1Nzd2veeVzvBVKXCuapzDBG:bERkT6YfTShzdgVzvSXCXD

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

c0ba04e2ab3a018bf3b9cda4435c477f9ae44a2c6b5d22996f5823dd2a13fd4b.exe

description	pid	process	target process
PID 4372 wrote to memory of 4756	4372	c0ba04e2ab3a018bf3b9cda4435c477f9ae44a2c6b5d22996f5823dd2a13fd4b.exe	c0ba04e2ab3a018bf3b9cda4435c477f9ae44a2c6b5d22996f5823dd2a13fd4b.exe
PID 4372 wrote to memory of 4756	4372	c0ba04e2ab3a018bf3b9cda4435c477f9ae44a2c6b5d22996f5823dd2a13fd4b.exe	c0ba04e2ab3a018bf3b9cda4435c477f9ae44a2c6b5d22996f5823dd2a13fd4b.exe
PID 4372 wrote to memory of 4756	4372	c0ba04e2ab3a018bf3b9cda4435c477f9ae44a2c6b5d22996f5823dd2a13fd4b.exe	c0ba04e2ab3a018bf3b9cda4435c477f9ae44a2c6b5d22996f5823dd2a13fd4b.exe

C:\Users\Admin\AppData\Local\Temp\c0ba04e2ab3a018bf3b9cda4435c477f9ae44a2c6b5d22996f5823dd2a13fd4b.exe
"C:\Users\Admin\AppData\Local\Temp\c0ba04e2ab3a018bf3b9cda4435c477f9ae44a2c6b5d22996f5823dd2a13fd4b.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4372
- C:\Users\Admin\AppData\Local\Temp\c0ba04e2ab3a018bf3b9cda4435c477f9ae44a2c6b5d22996f5823dd2a13fd4b.exe
  tear
  2⤵
  PID:4756

memory/4372-132-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/4372-133-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/4372-135-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/4756-134-0x0000000000000000-mapping.dmp

Download
memory/4756-136-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/4756-137-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/4756-138-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/4756-139-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download