c5afcf55a928ad712cf532e8860dd59ab085cca10bc665f50cca7ae5101d77ab

Analysis

max time kernel
144s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 15:58

Target

c5afcf55a928ad712cf532e8860dd59ab085cca10bc665f50cca7ae5101d77ab.exe
Size

528KB
MD5

5adf686789317fae30f3d8750f8a5955
SHA1

2fd18e3edd7454ac63fedff5f8773254f49b9690
SHA256

c5afcf55a928ad712cf532e8860dd59ab085cca10bc665f50cca7ae5101d77ab
SHA512

d241d520565151ff96c9f361faf4e13b2c0591c84fd73560a4975ce62d153e9b614aa571701d67996f810eb5f773f9769e06c4ec19f5de4acd7874887e9ac1f6
SSDEEP

12288:Mphut0A3QFaLXdqIA4CUHr0wh2DhqpnAToZ3Qmzg:MphuhQFaLNtA4CUL0wS83QmE

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

c5afcf55a928ad712cf532e8860dd59ab085cca10bc665f50cca7ae5101d77ab.exe

description	pid	process	target process
PID 2220 wrote to memory of 3436	2220	c5afcf55a928ad712cf532e8860dd59ab085cca10bc665f50cca7ae5101d77ab.exe	c5afcf55a928ad712cf532e8860dd59ab085cca10bc665f50cca7ae5101d77ab.exe
PID 2220 wrote to memory of 3436	2220	c5afcf55a928ad712cf532e8860dd59ab085cca10bc665f50cca7ae5101d77ab.exe	c5afcf55a928ad712cf532e8860dd59ab085cca10bc665f50cca7ae5101d77ab.exe
PID 2220 wrote to memory of 3436	2220	c5afcf55a928ad712cf532e8860dd59ab085cca10bc665f50cca7ae5101d77ab.exe	c5afcf55a928ad712cf532e8860dd59ab085cca10bc665f50cca7ae5101d77ab.exe

C:\Users\Admin\AppData\Local\Temp\c5afcf55a928ad712cf532e8860dd59ab085cca10bc665f50cca7ae5101d77ab.exe
"C:\Users\Admin\AppData\Local\Temp\c5afcf55a928ad712cf532e8860dd59ab085cca10bc665f50cca7ae5101d77ab.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2220
- C:\Users\Admin\AppData\Local\Temp\c5afcf55a928ad712cf532e8860dd59ab085cca10bc665f50cca7ae5101d77ab.exe
  tear
  2⤵
  PID:3436

memory/2220-132-0x0000000000400000-0x0000000000490000-memory.dmp

Filesize
576KB

Download
memory/2220-134-0x0000000000400000-0x0000000000490000-memory.dmp

Filesize
576KB

Download
memory/3436-133-0x0000000000000000-mapping.dmp

Download
memory/3436-135-0x0000000000400000-0x0000000000490000-memory.dmp

Filesize
576KB

Download
memory/3436-136-0x0000000000400000-0x0000000000490000-memory.dmp

Filesize
576KB

Download