1fb94cf29fb4de0128c73b3b2656fac0bc62b1cb0e93fc9b3eb213116568ab8b

Analysis

max time kernel
69s
max time network
134s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 14:48

Target

1fb94cf29fb4de0128c73b3b2656fac0bc62b1cb0e93fc9b3eb213116568ab8b.exe
Size

524KB
MD5

320f441b6f0e63ba2929792a070520ff
SHA1

0844003f3f0258faf0bf145a4e7c4cc9990ba07a
SHA256

1fb94cf29fb4de0128c73b3b2656fac0bc62b1cb0e93fc9b3eb213116568ab8b
SHA512

f64ed7a31fd7e3a3195744b47ab338c593357f7229b0f959d5587c2ca69ef64f9438e8ed156c79a70f8bb422e2210263c60064c0c276578f6478a422a8a8bd65
SSDEEP

12288:IHU+5NpqStWuXI9ChLVzvBVKXCuapzDBG:IdWkWuXmSLVzvSXCXD

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

1fb94cf29fb4de0128c73b3b2656fac0bc62b1cb0e93fc9b3eb213116568ab8b.exe

description	pid	process	target process
PID 2868 wrote to memory of 4900	2868	1fb94cf29fb4de0128c73b3b2656fac0bc62b1cb0e93fc9b3eb213116568ab8b.exe	1fb94cf29fb4de0128c73b3b2656fac0bc62b1cb0e93fc9b3eb213116568ab8b.exe
PID 2868 wrote to memory of 4900	2868	1fb94cf29fb4de0128c73b3b2656fac0bc62b1cb0e93fc9b3eb213116568ab8b.exe	1fb94cf29fb4de0128c73b3b2656fac0bc62b1cb0e93fc9b3eb213116568ab8b.exe
PID 2868 wrote to memory of 4900	2868	1fb94cf29fb4de0128c73b3b2656fac0bc62b1cb0e93fc9b3eb213116568ab8b.exe	1fb94cf29fb4de0128c73b3b2656fac0bc62b1cb0e93fc9b3eb213116568ab8b.exe

C:\Users\Admin\AppData\Local\Temp\1fb94cf29fb4de0128c73b3b2656fac0bc62b1cb0e93fc9b3eb213116568ab8b.exe
"C:\Users\Admin\AppData\Local\Temp\1fb94cf29fb4de0128c73b3b2656fac0bc62b1cb0e93fc9b3eb213116568ab8b.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2868

C:\Users\Admin\AppData\Local\Temp\1fb94cf29fb4de0128c73b3b2656fac0bc62b1cb0e93fc9b3eb213116568ab8b.exe
tear
2⤵
PID:4900

memory/2868-132-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/2868-133-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/2868-135-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/4900-134-0x0000000000000000-mapping.dmp

Download
memory/4900-136-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/4900-137-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/4900-138-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/4900-139-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download