cc37ba0ca1d7f8742a587aaea0dbd3be16ace5e4ac0aeafcbfd8e9a0a26c5e6a

Analysis

max time kernel
37s
max time network
50s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
23-11-2022 20:54

Target

cc37ba0ca1d7f8742a587aaea0dbd3be16ace5e4ac0aeafcbfd8e9a0a26c5e6a.exe
Size

305KB
MD5

565790f80f48626782993cd8fec79430
SHA1

9592b232a57474c97bcb78501711cf42f564ad1d
SHA256

cc37ba0ca1d7f8742a587aaea0dbd3be16ace5e4ac0aeafcbfd8e9a0a26c5e6a
SHA512

70eb581e8dcf748e4601b76a99634153f59a002ddd1d6c90ad0e2d644daf2237345adcc7d1d1f5b7b502e28ad7d1362e53bc60ed67affdc5cf608b9688599640
SSDEEP

6144:CZMHXdv9MAOgtXWCuBwij07b295pj7yIcP7+RCdJiVSQbOmRv6C:pXdvNtCjj+w2xzibbOmRv6C

Score

1^/10

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

cc37ba0ca1d7f8742a587aaea0dbd3be16ace5e4ac0aeafcbfd8e9a0a26c5e6a.exe

description	pid	process	target process
PID 1664 wrote to memory of 2020	1664	cc37ba0ca1d7f8742a587aaea0dbd3be16ace5e4ac0aeafcbfd8e9a0a26c5e6a.exe	cc37ba0ca1d7f8742a587aaea0dbd3be16ace5e4ac0aeafcbfd8e9a0a26c5e6a.exe
PID 1664 wrote to memory of 2020	1664	cc37ba0ca1d7f8742a587aaea0dbd3be16ace5e4ac0aeafcbfd8e9a0a26c5e6a.exe	cc37ba0ca1d7f8742a587aaea0dbd3be16ace5e4ac0aeafcbfd8e9a0a26c5e6a.exe
PID 1664 wrote to memory of 2020	1664	cc37ba0ca1d7f8742a587aaea0dbd3be16ace5e4ac0aeafcbfd8e9a0a26c5e6a.exe	cc37ba0ca1d7f8742a587aaea0dbd3be16ace5e4ac0aeafcbfd8e9a0a26c5e6a.exe
PID 1664 wrote to memory of 2020	1664	cc37ba0ca1d7f8742a587aaea0dbd3be16ace5e4ac0aeafcbfd8e9a0a26c5e6a.exe	cc37ba0ca1d7f8742a587aaea0dbd3be16ace5e4ac0aeafcbfd8e9a0a26c5e6a.exe

C:\Users\Admin\AppData\Local\Temp\cc37ba0ca1d7f8742a587aaea0dbd3be16ace5e4ac0aeafcbfd8e9a0a26c5e6a.exe
"C:\Users\Admin\AppData\Local\Temp\cc37ba0ca1d7f8742a587aaea0dbd3be16ace5e4ac0aeafcbfd8e9a0a26c5e6a.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1664
- C:\Users\Admin\AppData\Local\Temp\cc37ba0ca1d7f8742a587aaea0dbd3be16ace5e4ac0aeafcbfd8e9a0a26c5e6a.exe
  tear
  2⤵
  PID:2020

memory/1664-54-0x0000000076181000-0x0000000076183000-memory.dmp

Filesize
8KB

Download
memory/1664-57-0x0000000000400000-0x0000000000460000-memory.dmp

Filesize
384KB

Download
memory/2020-55-0x0000000000000000-mapping.dmp

Download
memory/2020-58-0x0000000000400000-0x0000000000460000-memory.dmp

Filesize
384KB

Download
memory/2020-59-0x0000000000400000-0x0000000000460000-memory.dmp

Filesize
384KB

Download
memory/2020-60-0x0000000000400000-0x0000000000460000-memory.dmp

Filesize
384KB

Download