b51b4c713c232ab0217253b8bfd6f34fcb3b6b4dd0f57bf1fc3b361ed70c9abe

Analysis

max time kernel
60s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 13:18

Target

b51b4c713c232ab0217253b8bfd6f34fcb3b6b4dd0f57bf1fc3b361ed70c9abe.exe
Size

524KB
MD5

4c9b8e1673df8ba45db0173a6d387f9a
SHA1

8491ce39ce177c65421d398c404a2accda631e2f
SHA256

b51b4c713c232ab0217253b8bfd6f34fcb3b6b4dd0f57bf1fc3b361ed70c9abe
SHA512

25535d32af2cd79d05f98c3c8b0ad5cf6608b3758905a6f5337c5dd69eb1c64e3e2e36934b35cf22b8f3443bacf9e6483e27ad5948fc72701b4895ed8080b2a0
SSDEEP

12288:Aa4uRQimvA9AA8nZMw2wTVzvBVKXCuapzDBG:Aa/GMw2wTVzvSXCXD

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

b51b4c713c232ab0217253b8bfd6f34fcb3b6b4dd0f57bf1fc3b361ed70c9abe.exe

description	pid	process	target process
PID 400 wrote to memory of 2208	400	b51b4c713c232ab0217253b8bfd6f34fcb3b6b4dd0f57bf1fc3b361ed70c9abe.exe	b51b4c713c232ab0217253b8bfd6f34fcb3b6b4dd0f57bf1fc3b361ed70c9abe.exe
PID 400 wrote to memory of 2208	400	b51b4c713c232ab0217253b8bfd6f34fcb3b6b4dd0f57bf1fc3b361ed70c9abe.exe	b51b4c713c232ab0217253b8bfd6f34fcb3b6b4dd0f57bf1fc3b361ed70c9abe.exe
PID 400 wrote to memory of 2208	400	b51b4c713c232ab0217253b8bfd6f34fcb3b6b4dd0f57bf1fc3b361ed70c9abe.exe	b51b4c713c232ab0217253b8bfd6f34fcb3b6b4dd0f57bf1fc3b361ed70c9abe.exe

C:\Users\Admin\AppData\Local\Temp\b51b4c713c232ab0217253b8bfd6f34fcb3b6b4dd0f57bf1fc3b361ed70c9abe.exe
"C:\Users\Admin\AppData\Local\Temp\b51b4c713c232ab0217253b8bfd6f34fcb3b6b4dd0f57bf1fc3b361ed70c9abe.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:400
- C:\Users\Admin\AppData\Local\Temp\b51b4c713c232ab0217253b8bfd6f34fcb3b6b4dd0f57bf1fc3b361ed70c9abe.exe
  tear
  2⤵
  PID:2208

memory/400-132-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/400-134-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/2208-133-0x0000000000000000-mapping.dmp

Download
memory/2208-135-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/2208-136-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/2208-137-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/2208-138-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download