ae0b77424620fdade935b504874f75b5773a79d13ada83181f146eaa1e24c9af

Analysis

max time kernel
338s
max time network
389s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
24/11/2022, 07:39

Target

ae0b77424620fdade935b504874f75b5773a79d13ada83181f146eaa1e24c9af.exe
Size

522KB
MD5

6d66ccd31d926ffa41d57d99dd692199
SHA1

fae41946757928b78749f26aaeac5aca74c46779
SHA256

ae0b77424620fdade935b504874f75b5773a79d13ada83181f146eaa1e24c9af
SHA512

94d21e8e2a223cef948757c6b863fab74e9df45ffd3e285dc988aeea6ed879195b926284f0cd1609ea95ce5e30001a6cf5f6d7707aaaf163d2c6bec96f19aac1
SSDEEP

6144:GwhRG46YHeUAk9cUZjjcXdTTkxp3ltm3trFWEPmQy1CrxQqD9RSaSz+8O50igW:ng70eQcA2KRlkHR1y18xQqpx8O50H

Score

1^/10

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 2400 wrote to memory of 3812	2400	ae0b77424620fdade935b504874f75b5773a79d13ada83181f146eaa1e24c9af.exe	82
PID 2400 wrote to memory of 3812	2400	ae0b77424620fdade935b504874f75b5773a79d13ada83181f146eaa1e24c9af.exe	82
PID 2400 wrote to memory of 3812	2400	ae0b77424620fdade935b504874f75b5773a79d13ada83181f146eaa1e24c9af.exe	82
PID 2400 wrote to memory of 1944	2400	ae0b77424620fdade935b504874f75b5773a79d13ada83181f146eaa1e24c9af.exe	83
PID 2400 wrote to memory of 1944	2400	ae0b77424620fdade935b504874f75b5773a79d13ada83181f146eaa1e24c9af.exe	83
PID 2400 wrote to memory of 1944	2400	ae0b77424620fdade935b504874f75b5773a79d13ada83181f146eaa1e24c9af.exe	83

C:\Users\Admin\AppData\Local\Temp\ae0b77424620fdade935b504874f75b5773a79d13ada83181f146eaa1e24c9af.exe
"C:\Users\Admin\AppData\Local\Temp\ae0b77424620fdade935b504874f75b5773a79d13ada83181f146eaa1e24c9af.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2400
- C:\Users\Admin\AppData\Local\Temp\ae0b77424620fdade935b504874f75b5773a79d13ada83181f146eaa1e24c9af.exe
  start
  2⤵
  PID:3812
- C:\Users\Admin\AppData\Local\Temp\ae0b77424620fdade935b504874f75b5773a79d13ada83181f146eaa1e24c9af.exe
  watch
  2⤵
  PID:1944

memory/1944-137-0x0000000000400000-0x000000000048C000-memory.dmp

Filesize
560KB

Download
memory/1944-139-0x0000000000400000-0x000000000048C000-memory.dmp

Filesize
560KB

Download
memory/2400-132-0x0000000000400000-0x000000000048C000-memory.dmp

Filesize
560KB

Download
memory/2400-133-0x0000000000400000-0x000000000048C000-memory.dmp

Filesize
560KB

Download
memory/2400-136-0x0000000000400000-0x000000000048C000-memory.dmp

Filesize
560KB

Download
memory/3812-138-0x0000000000400000-0x000000000048C000-memory.dmp

Filesize
560KB

Download
memory/3812-140-0x0000000000400000-0x000000000048C000-memory.dmp

Filesize
560KB

Download