39368f6492546bd5eba1f0edcf4d8af39d4c0b32884769f74bf4c705f105dbb1

Analysis

max time kernel
18s
max time network
34s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
23-11-2022 15:47

Target

39368f6492546bd5eba1f0edcf4d8af39d4c0b32884769f74bf4c705f105dbb1.exe
Size

50KB
MD5

a9be46dca4ad0283f0419783733b6e3b
SHA1

7d4f173f0d7a47a826d65e5152f87c7591a89b39
SHA256

39368f6492546bd5eba1f0edcf4d8af39d4c0b32884769f74bf4c705f105dbb1
SHA512

3c7447884b9fda1b8f4155dd27bdb10125573d5be68e2e61fc1ecd1e8b22e18a0f6f57e9ea281983e5298cfab9ac94c2544cb99d8ab6b426cce258d2282be141
SSDEEP

768:hUjKVjl9xw3x6nz7vj1wrIMNj/RBLj+z/CIopJWyNjEnJkeLUXcOq:hUKJ3zzj1wUAj/vLq+dzAJzUMd

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes:

39368f6492546bd5eba1f0edcf4d8af39d4c0b32884769f74bf4c705f105dbb1.exe

pid	process
1788	39368f6492546bd5eba1f0edcf4d8af39d4c0b32884769f74bf4c705f105dbb1.exe
1788	39368f6492546bd5eba1f0edcf4d8af39d4c0b32884769f74bf4c705f105dbb1.exe

Suspicious use of WriteProcessMemory 6 IoCs

Processes:

39368f6492546bd5eba1f0edcf4d8af39d4c0b32884769f74bf4c705f105dbb1.exe

description	pid	process	target process
PID 1788 wrote to memory of 1208	1788	39368f6492546bd5eba1f0edcf4d8af39d4c0b32884769f74bf4c705f105dbb1.exe	Explorer.EXE
PID 1788 wrote to memory of 1208	1788	39368f6492546bd5eba1f0edcf4d8af39d4c0b32884769f74bf4c705f105dbb1.exe	Explorer.EXE
PID 1788 wrote to memory of 1208	1788	39368f6492546bd5eba1f0edcf4d8af39d4c0b32884769f74bf4c705f105dbb1.exe	Explorer.EXE
PID 1788 wrote to memory of 1208	1788	39368f6492546bd5eba1f0edcf4d8af39d4c0b32884769f74bf4c705f105dbb1.exe	Explorer.EXE
PID 1788 wrote to memory of 1208	1788	39368f6492546bd5eba1f0edcf4d8af39d4c0b32884769f74bf4c705f105dbb1.exe	Explorer.EXE
PID 1788 wrote to memory of 1208	1788	39368f6492546bd5eba1f0edcf4d8af39d4c0b32884769f74bf4c705f105dbb1.exe	Explorer.EXE

memory/1208-57-0x000000007EFC0000-0x000000007EFC6000-memory.dmp

Filesize
24KB

Download
memory/1788-54-0x00000000760D1000-0x00000000760D3000-memory.dmp

Filesize
8KB

Download
memory/1788-55-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1788-56-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download