63cc540b744a5d8c99001b7470ff8c5694b1dcbebac09f98ca408737cb1ef767

Analysis

max time kernel
92s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 14:08

Target

63cc540b744a5d8c99001b7470ff8c5694b1dcbebac09f98ca408737cb1ef767.exe
Size

528KB
MD5

16b34ef44a2950e73a9c22c0fc2f6b4e
SHA1

ba8c8aa661e1337e2b603885ca36e4d2f69dcf2d
SHA256

63cc540b744a5d8c99001b7470ff8c5694b1dcbebac09f98ca408737cb1ef767
SHA512

479b67a7041842937241291ae77a09eb2965a0b80682b195183e81bb053584cbcf9a1d709dfba1caa0fbd09027b345bd42e3d127b75a710643e0c94702f0a920
SSDEEP

12288:qBWen308AkdKA0sqSjK/EK0wh2DhqpnAToZ9Qmrg:qBHn3ozS60wS89Qmc

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

63cc540b744a5d8c99001b7470ff8c5694b1dcbebac09f98ca408737cb1ef767.exe

description	pid	process	target process
PID 4236 wrote to memory of 5032	4236	63cc540b744a5d8c99001b7470ff8c5694b1dcbebac09f98ca408737cb1ef767.exe	63cc540b744a5d8c99001b7470ff8c5694b1dcbebac09f98ca408737cb1ef767.exe
PID 4236 wrote to memory of 5032	4236	63cc540b744a5d8c99001b7470ff8c5694b1dcbebac09f98ca408737cb1ef767.exe	63cc540b744a5d8c99001b7470ff8c5694b1dcbebac09f98ca408737cb1ef767.exe
PID 4236 wrote to memory of 5032	4236	63cc540b744a5d8c99001b7470ff8c5694b1dcbebac09f98ca408737cb1ef767.exe	63cc540b744a5d8c99001b7470ff8c5694b1dcbebac09f98ca408737cb1ef767.exe

C:\Users\Admin\AppData\Local\Temp\63cc540b744a5d8c99001b7470ff8c5694b1dcbebac09f98ca408737cb1ef767.exe
"C:\Users\Admin\AppData\Local\Temp\63cc540b744a5d8c99001b7470ff8c5694b1dcbebac09f98ca408737cb1ef767.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4236
- C:\Users\Admin\AppData\Local\Temp\63cc540b744a5d8c99001b7470ff8c5694b1dcbebac09f98ca408737cb1ef767.exe
  tear
  2⤵
  PID:5032

memory/4236-132-0x0000000000400000-0x0000000000490000-memory.dmp

Filesize
576KB

Download
memory/4236-134-0x0000000000400000-0x0000000000490000-memory.dmp

Filesize
576KB

Download
memory/5032-133-0x0000000000000000-mapping.dmp

Download
memory/5032-135-0x0000000000400000-0x0000000000490000-memory.dmp

Filesize
576KB

Download
memory/5032-136-0x0000000000400000-0x0000000000490000-memory.dmp

Filesize
576KB

Download