941a42b94c02ffc17422676cdccf57e09a073d8d91259c4ea5a0ec2babbf76e4

Analysis

max time kernel
205s
max time network
212s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 13:38

Target

941a42b94c02ffc17422676cdccf57e09a073d8d91259c4ea5a0ec2babbf76e4.exe
Size

533KB
MD5

4c9a1e7e42320d9a5c13d59a85a128a9
SHA1

b56adb52273a4df75a92cf699f30c8773374bbf4
SHA256

941a42b94c02ffc17422676cdccf57e09a073d8d91259c4ea5a0ec2babbf76e4
SHA512

56802c4212b409a97a3cfc369c0e67759cb979e2eaea9c10262ab303eaa87518317750ee7e74597f3d7a170d643b7c6806174bf5804a45cf86ac8ec1c60bb9c8
SSDEEP

6144:1GcaK60qJPrY9RQM55DiHjGI9BQcbrXlvrtx0GMJafWqjMAIKIZ4xQGAOL0Zd5hW:nJElGjcbrXlRx0GLM5ChzQ1RVykKjY

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

941a42b94c02ffc17422676cdccf57e09a073d8d91259c4ea5a0ec2babbf76e4.exe

description	pid	process	target process
PID 1152 wrote to memory of 4700	1152	941a42b94c02ffc17422676cdccf57e09a073d8d91259c4ea5a0ec2babbf76e4.exe	941a42b94c02ffc17422676cdccf57e09a073d8d91259c4ea5a0ec2babbf76e4.exe
PID 1152 wrote to memory of 4700	1152	941a42b94c02ffc17422676cdccf57e09a073d8d91259c4ea5a0ec2babbf76e4.exe	941a42b94c02ffc17422676cdccf57e09a073d8d91259c4ea5a0ec2babbf76e4.exe
PID 1152 wrote to memory of 4700	1152	941a42b94c02ffc17422676cdccf57e09a073d8d91259c4ea5a0ec2babbf76e4.exe	941a42b94c02ffc17422676cdccf57e09a073d8d91259c4ea5a0ec2babbf76e4.exe

C:\Users\Admin\AppData\Local\Temp\941a42b94c02ffc17422676cdccf57e09a073d8d91259c4ea5a0ec2babbf76e4.exe
"C:\Users\Admin\AppData\Local\Temp\941a42b94c02ffc17422676cdccf57e09a073d8d91259c4ea5a0ec2babbf76e4.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1152

C:\Users\Admin\AppData\Local\Temp\941a42b94c02ffc17422676cdccf57e09a073d8d91259c4ea5a0ec2babbf76e4.exe
tear
2⤵
PID:4700

memory/1152-132-0x0000000000400000-0x0000000000491000-memory.dmp

Filesize
580KB

Download
memory/1152-134-0x0000000000400000-0x0000000000491000-memory.dmp

Filesize
580KB

Download
memory/4700-133-0x0000000000000000-mapping.dmp

Download
memory/4700-135-0x0000000000400000-0x0000000000491000-memory.dmp

Filesize
580KB

Download
memory/4700-136-0x0000000000400000-0x0000000000491000-memory.dmp

Filesize
580KB

Download
memory/4700-137-0x0000000000400000-0x0000000000491000-memory.dmp

Filesize
580KB

Download