05f1c0dfd593191700246cd7a71103bb1b8b013d68f28db477a42a2d56e39ea5

Analysis

max time kernel
190s
max time network
209s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
24/11/2022, 03:14

Target

05f1c0dfd593191700246cd7a71103bb1b8b013d68f28db477a42a2d56e39ea5.exe
Size

484KB
MD5

fcf36874e79d3e5925918febee1c049d
SHA1

6ae7e9ac2124f79c7b706a922484aa374395ad07
SHA256

05f1c0dfd593191700246cd7a71103bb1b8b013d68f28db477a42a2d56e39ea5
SHA512

96b67e57e7fb3013dcd3ade2577247ca6afe57554ed2b5be35cd43a9ab67c5e658e403382b49f55d96d9ab54da657a23eebc35bd5fd372f48c53f9b5c3df8a34
SSDEEP

6144:Hy88iNgu4Y15P0ivt7Fpz1v5TvoqwKX9vhJT+RdjZ6DGsLfehpZ80ag5oWa5AycP:HZ8LHmMG5TvoqVX+2+WWaaycYQL

Score

1^/10

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 1060 wrote to memory of 212	1060	05f1c0dfd593191700246cd7a71103bb1b8b013d68f28db477a42a2d56e39ea5.exe	82
PID 1060 wrote to memory of 212	1060	05f1c0dfd593191700246cd7a71103bb1b8b013d68f28db477a42a2d56e39ea5.exe	82
PID 1060 wrote to memory of 212	1060	05f1c0dfd593191700246cd7a71103bb1b8b013d68f28db477a42a2d56e39ea5.exe	82
PID 1060 wrote to memory of 112	1060	05f1c0dfd593191700246cd7a71103bb1b8b013d68f28db477a42a2d56e39ea5.exe	83
PID 1060 wrote to memory of 112	1060	05f1c0dfd593191700246cd7a71103bb1b8b013d68f28db477a42a2d56e39ea5.exe	83
PID 1060 wrote to memory of 112	1060	05f1c0dfd593191700246cd7a71103bb1b8b013d68f28db477a42a2d56e39ea5.exe	83

C:\Users\Admin\AppData\Local\Temp\05f1c0dfd593191700246cd7a71103bb1b8b013d68f28db477a42a2d56e39ea5.exe
"C:\Users\Admin\AppData\Local\Temp\05f1c0dfd593191700246cd7a71103bb1b8b013d68f28db477a42a2d56e39ea5.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1060
- C:\Users\Admin\AppData\Local\Temp\05f1c0dfd593191700246cd7a71103bb1b8b013d68f28db477a42a2d56e39ea5.exe
  start
  2⤵
  PID:212
- C:\Users\Admin\AppData\Local\Temp\05f1c0dfd593191700246cd7a71103bb1b8b013d68f28db477a42a2d56e39ea5.exe
  watch
  2⤵
  PID:112

memory/112-137-0x0000000000400000-0x000000000047E000-memory.dmp

Filesize
504KB

Download
memory/112-139-0x0000000000400000-0x000000000047E000-memory.dmp

Filesize
504KB

Download
memory/112-142-0x0000000000400000-0x000000000047E000-memory.dmp

Filesize
504KB

Download
memory/212-138-0x0000000000400000-0x000000000047E000-memory.dmp

Filesize
504KB

Download
memory/212-140-0x0000000000400000-0x000000000047E000-memory.dmp

Filesize
504KB

Download
memory/212-141-0x0000000000400000-0x000000000047E000-memory.dmp

Filesize
504KB

Download
memory/1060-132-0x0000000000400000-0x000000000047E000-memory.dmp

Filesize
504KB

Download
memory/1060-133-0x0000000000400000-0x000000000047E000-memory.dmp

Filesize
504KB

Download
memory/1060-136-0x0000000000400000-0x000000000047E000-memory.dmp

Filesize
504KB

Download