274cd407e25d57e6ed218b65bd1ea2ff8270dceb0496e151f44221164b26e56b

Analysis

max time kernel
152s
max time network
161s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
26-11-2022 22:06

Target

274cd407e25d57e6ed218b65bd1ea2ff8270dceb0496e151f44221164b26e56b.exe
Size

507KB
MD5

cdf287d8f83e33f355038f323ffbbf6e
SHA1

51508de9b499bc772af40d5fbefdf38fb8aaf756
SHA256

274cd407e25d57e6ed218b65bd1ea2ff8270dceb0496e151f44221164b26e56b
SHA512

c86588e2fa1a43ec1f29b3465894209c41fc1c54341d7aa8de334a6062e22afdaf028cc72e9da0160f9124b27379955f16388674b6ed5a6b33085ff540994bb9
SSDEEP

6144:5m76WxLZXX+q9o5IV6qSJkhlpNbgsjzsei2smDpAOFSqA3CzIcN5fcFkJrS5IWXe:ulX+qSGV6bdBmD/Iqlz4r5IW

Score

1^/10

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 2152 wrote to memory of 4816	2152	274cd407e25d57e6ed218b65bd1ea2ff8270dceb0496e151f44221164b26e56b.exe	82
PID 2152 wrote to memory of 4816	2152	274cd407e25d57e6ed218b65bd1ea2ff8270dceb0496e151f44221164b26e56b.exe	82
PID 2152 wrote to memory of 4816	2152	274cd407e25d57e6ed218b65bd1ea2ff8270dceb0496e151f44221164b26e56b.exe	82
PID 2152 wrote to memory of 4856	2152	274cd407e25d57e6ed218b65bd1ea2ff8270dceb0496e151f44221164b26e56b.exe	83
PID 2152 wrote to memory of 4856	2152	274cd407e25d57e6ed218b65bd1ea2ff8270dceb0496e151f44221164b26e56b.exe	83
PID 2152 wrote to memory of 4856	2152	274cd407e25d57e6ed218b65bd1ea2ff8270dceb0496e151f44221164b26e56b.exe	83

C:\Users\Admin\AppData\Local\Temp\274cd407e25d57e6ed218b65bd1ea2ff8270dceb0496e151f44221164b26e56b.exe
"C:\Users\Admin\AppData\Local\Temp\274cd407e25d57e6ed218b65bd1ea2ff8270dceb0496e151f44221164b26e56b.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2152
- C:\Users\Admin\AppData\Local\Temp\274cd407e25d57e6ed218b65bd1ea2ff8270dceb0496e151f44221164b26e56b.exe
  start
  2⤵
  PID:4816
- C:\Users\Admin\AppData\Local\Temp\274cd407e25d57e6ed218b65bd1ea2ff8270dceb0496e151f44221164b26e56b.exe
  watch
  2⤵
  PID:4856

memory/2152-132-0x0000000000400000-0x0000000000484000-memory.dmp

Filesize
528KB

Download
memory/2152-135-0x0000000000400000-0x0000000000484000-memory.dmp

Filesize
528KB

Download
memory/4816-133-0x0000000000000000-mapping.dmp

Download
memory/4816-136-0x0000000000400000-0x0000000000484000-memory.dmp

Filesize
528KB

Download
memory/4816-138-0x0000000000400000-0x0000000000484000-memory.dmp

Filesize
528KB

Download
memory/4816-140-0x0000000000400000-0x0000000000484000-memory.dmp

Filesize
528KB

Download
memory/4856-134-0x0000000000000000-mapping.dmp

Download
memory/4856-137-0x0000000000400000-0x0000000000484000-memory.dmp

Filesize
528KB

Download
memory/4856-139-0x0000000000400000-0x0000000000484000-memory.dmp

Filesize
528KB

Download
memory/4856-141-0x0000000000400000-0x0000000000484000-memory.dmp

Filesize
528KB

Download