96633ce21a5da3fe6907df3ba560331fa0fdf26c3454d439a1d9a5ab5c358ea3

Analysis

max time kernel
90s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 13:36

Target

96633ce21a5da3fe6907df3ba560331fa0fdf26c3454d439a1d9a5ab5c358ea3.exe
Size

537KB
MD5

61c9c1474a72e17c28e59534d853210b
SHA1

06c8b068359360c7209c4ee905ae6df6c06806e2
SHA256

96633ce21a5da3fe6907df3ba560331fa0fdf26c3454d439a1d9a5ab5c358ea3
SHA512

6afc2bf462e0f7e3c1377b4ab2f2cbcd9fb2b18cc144dfd62c62129141f1b8aaee46773a7939390c41de16247c57468b2a7f46fb382768f240b580e979190355
SSDEEP

12288:QrOmM5boOcCQ5ohDMNvvVWslpdc0/WfYrUTkuHQ:svu6fjWsl3cDJ/w

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

96633ce21a5da3fe6907df3ba560331fa0fdf26c3454d439a1d9a5ab5c358ea3.exe

description	pid	process	target process
PID 2680 wrote to memory of 4624	2680	96633ce21a5da3fe6907df3ba560331fa0fdf26c3454d439a1d9a5ab5c358ea3.exe	96633ce21a5da3fe6907df3ba560331fa0fdf26c3454d439a1d9a5ab5c358ea3.exe
PID 2680 wrote to memory of 4624	2680	96633ce21a5da3fe6907df3ba560331fa0fdf26c3454d439a1d9a5ab5c358ea3.exe	96633ce21a5da3fe6907df3ba560331fa0fdf26c3454d439a1d9a5ab5c358ea3.exe
PID 2680 wrote to memory of 4624	2680	96633ce21a5da3fe6907df3ba560331fa0fdf26c3454d439a1d9a5ab5c358ea3.exe	96633ce21a5da3fe6907df3ba560331fa0fdf26c3454d439a1d9a5ab5c358ea3.exe

C:\Users\Admin\AppData\Local\Temp\96633ce21a5da3fe6907df3ba560331fa0fdf26c3454d439a1d9a5ab5c358ea3.exe
"C:\Users\Admin\AppData\Local\Temp\96633ce21a5da3fe6907df3ba560331fa0fdf26c3454d439a1d9a5ab5c358ea3.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2680

C:\Users\Admin\AppData\Local\Temp\96633ce21a5da3fe6907df3ba560331fa0fdf26c3454d439a1d9a5ab5c358ea3.exe
tear
2⤵
PID:4624

memory/2680-132-0x0000000000400000-0x0000000000491000-memory.dmp

Filesize
580KB

Download
memory/2680-134-0x0000000000400000-0x0000000000491000-memory.dmp

Filesize
580KB

Download
memory/4624-133-0x0000000000000000-mapping.dmp

Download
memory/4624-135-0x0000000000400000-0x0000000000491000-memory.dmp

Filesize
580KB

Download
memory/4624-136-0x0000000000400000-0x0000000000491000-memory.dmp

Filesize
580KB

Download