b51b4c713c232ab0217253b8bfd6f34fcb3b6b4dd0f57bf1fc3b361ed70c9abe

Analysis

max time kernel
43s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
23-11-2022 13:18

Target

b51b4c713c232ab0217253b8bfd6f34fcb3b6b4dd0f57bf1fc3b361ed70c9abe.exe
Size

524KB
MD5

4c9b8e1673df8ba45db0173a6d387f9a
SHA1

8491ce39ce177c65421d398c404a2accda631e2f
SHA256

b51b4c713c232ab0217253b8bfd6f34fcb3b6b4dd0f57bf1fc3b361ed70c9abe
SHA512

25535d32af2cd79d05f98c3c8b0ad5cf6608b3758905a6f5337c5dd69eb1c64e3e2e36934b35cf22b8f3443bacf9e6483e27ad5948fc72701b4895ed8080b2a0
SSDEEP

12288:Aa4uRQimvA9AA8nZMw2wTVzvBVKXCuapzDBG:Aa/GMw2wTVzvSXCXD

Score

1^/10

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

b51b4c713c232ab0217253b8bfd6f34fcb3b6b4dd0f57bf1fc3b361ed70c9abe.exe

description	pid	process	target process
PID 1736 wrote to memory of 952	1736	b51b4c713c232ab0217253b8bfd6f34fcb3b6b4dd0f57bf1fc3b361ed70c9abe.exe	b51b4c713c232ab0217253b8bfd6f34fcb3b6b4dd0f57bf1fc3b361ed70c9abe.exe
PID 1736 wrote to memory of 952	1736	b51b4c713c232ab0217253b8bfd6f34fcb3b6b4dd0f57bf1fc3b361ed70c9abe.exe	b51b4c713c232ab0217253b8bfd6f34fcb3b6b4dd0f57bf1fc3b361ed70c9abe.exe
PID 1736 wrote to memory of 952	1736	b51b4c713c232ab0217253b8bfd6f34fcb3b6b4dd0f57bf1fc3b361ed70c9abe.exe	b51b4c713c232ab0217253b8bfd6f34fcb3b6b4dd0f57bf1fc3b361ed70c9abe.exe
PID 1736 wrote to memory of 952	1736	b51b4c713c232ab0217253b8bfd6f34fcb3b6b4dd0f57bf1fc3b361ed70c9abe.exe	b51b4c713c232ab0217253b8bfd6f34fcb3b6b4dd0f57bf1fc3b361ed70c9abe.exe

C:\Users\Admin\AppData\Local\Temp\b51b4c713c232ab0217253b8bfd6f34fcb3b6b4dd0f57bf1fc3b361ed70c9abe.exe
"C:\Users\Admin\AppData\Local\Temp\b51b4c713c232ab0217253b8bfd6f34fcb3b6b4dd0f57bf1fc3b361ed70c9abe.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1736
- C:\Users\Admin\AppData\Local\Temp\b51b4c713c232ab0217253b8bfd6f34fcb3b6b4dd0f57bf1fc3b361ed70c9abe.exe
  tear
  2⤵
  PID:952

memory/952-55-0x0000000000000000-mapping.dmp

Download
memory/952-58-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/952-59-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/1736-54-0x0000000075DA1000-0x0000000075DA3000-memory.dmp

Filesize
8KB

Download
memory/1736-56-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download