a6c3c9b0c8e6b68c120774f348c0bd39f9dd93743f9a3aee2b9becc2a9a5c072

Analysis

max time kernel
167s
max time network
188s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
27/11/2022, 10:01

Target

a6c3c9b0c8e6b68c120774f348c0bd39f9dd93743f9a3aee2b9becc2a9a5c072.exe
Size

525KB
MD5

f1c4105bfc736d3b0abc55138c6def6e
SHA1

b15ce143690b73b3c613a029db658ecf8ec6991f
SHA256

a6c3c9b0c8e6b68c120774f348c0bd39f9dd93743f9a3aee2b9becc2a9a5c072
SHA512

9e5e078c4526efaf65dd226bcf62d01b2cde83d069c4f1621ceac68386764055a9d1b55dbb6cdb3009a1f3cb5385b08a135df0db9f28d21aaa1a9fcf8c3e751f
SSDEEP

6144:/2ZntTDPa+MDSM6sjnpZg/C8Yy1Gh//bciNOFsNtg+bK7EsnIq97Z7i+Jk2OcRfl:/2ZnNazjp2HugANpWIsnzrMM6A0Uc

Score

1^/10

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 4268 wrote to memory of 4376	4268	a6c3c9b0c8e6b68c120774f348c0bd39f9dd93743f9a3aee2b9becc2a9a5c072.exe	79
PID 4268 wrote to memory of 4376	4268	a6c3c9b0c8e6b68c120774f348c0bd39f9dd93743f9a3aee2b9becc2a9a5c072.exe	79
PID 4268 wrote to memory of 4376	4268	a6c3c9b0c8e6b68c120774f348c0bd39f9dd93743f9a3aee2b9becc2a9a5c072.exe	79
PID 4268 wrote to memory of 3816	4268	a6c3c9b0c8e6b68c120774f348c0bd39f9dd93743f9a3aee2b9becc2a9a5c072.exe	80
PID 4268 wrote to memory of 3816	4268	a6c3c9b0c8e6b68c120774f348c0bd39f9dd93743f9a3aee2b9becc2a9a5c072.exe	80
PID 4268 wrote to memory of 3816	4268	a6c3c9b0c8e6b68c120774f348c0bd39f9dd93743f9a3aee2b9becc2a9a5c072.exe	80

C:\Users\Admin\AppData\Local\Temp\a6c3c9b0c8e6b68c120774f348c0bd39f9dd93743f9a3aee2b9becc2a9a5c072.exe
"C:\Users\Admin\AppData\Local\Temp\a6c3c9b0c8e6b68c120774f348c0bd39f9dd93743f9a3aee2b9becc2a9a5c072.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4268
- C:\Users\Admin\AppData\Local\Temp\a6c3c9b0c8e6b68c120774f348c0bd39f9dd93743f9a3aee2b9becc2a9a5c072.exe
  start
  2⤵
  PID:4376
- C:\Users\Admin\AppData\Local\Temp\a6c3c9b0c8e6b68c120774f348c0bd39f9dd93743f9a3aee2b9becc2a9a5c072.exe
  watch
  2⤵
  PID:3816

memory/3816-136-0x0000000000400000-0x000000000048A000-memory.dmp

Filesize
552KB

Download
memory/3816-138-0x0000000000400000-0x000000000048A000-memory.dmp

Filesize
552KB

Download
memory/4268-134-0x0000000000400000-0x000000000048A000-memory.dmp

Filesize
552KB

Download
memory/4376-135-0x0000000000400000-0x000000000048A000-memory.dmp

Filesize
552KB

Download
memory/4376-137-0x0000000000400000-0x000000000048A000-memory.dmp

Filesize
552KB

Download