abaad55a7be87c3c03abeab64412a3a7de50cbbc448f6a8cdfdcad59c9cd7369

Analysis

max time kernel
91s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
27-11-2022 09:59

Target

abaad55a7be87c3c03abeab64412a3a7de50cbbc448f6a8cdfdcad59c9cd7369.exe
Size

529KB
MD5

2506758a65cb42b0938f578d4c601281
SHA1

720597b88a8da476bcd5fa98d6cc71f3db426884
SHA256

abaad55a7be87c3c03abeab64412a3a7de50cbbc448f6a8cdfdcad59c9cd7369
SHA512

a4aa3ca231a28098cb35c3eb79a3febe1f8d8d19a5cbf4786166096eeeae7987c5cc8d819c8cff64daf9cf4796a8f6955637a81c8743aad308e97abf347599fe
SSDEEP

6144:o2ZpYpbJXkdlylucM9Gm/8qrAhn2akGQ12EIgK1Kr4u/wjt225D4BI0EUIP6LaPO:o2ZaqURC0bkaREz0c/wz5W6N0N4U

Score

1^/10

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 4204 wrote to memory of 5072	4204	abaad55a7be87c3c03abeab64412a3a7de50cbbc448f6a8cdfdcad59c9cd7369.exe	81
PID 4204 wrote to memory of 5072	4204	abaad55a7be87c3c03abeab64412a3a7de50cbbc448f6a8cdfdcad59c9cd7369.exe	81
PID 4204 wrote to memory of 5072	4204	abaad55a7be87c3c03abeab64412a3a7de50cbbc448f6a8cdfdcad59c9cd7369.exe	81
PID 4204 wrote to memory of 4932	4204	abaad55a7be87c3c03abeab64412a3a7de50cbbc448f6a8cdfdcad59c9cd7369.exe	82
PID 4204 wrote to memory of 4932	4204	abaad55a7be87c3c03abeab64412a3a7de50cbbc448f6a8cdfdcad59c9cd7369.exe	82
PID 4204 wrote to memory of 4932	4204	abaad55a7be87c3c03abeab64412a3a7de50cbbc448f6a8cdfdcad59c9cd7369.exe	82

C:\Users\Admin\AppData\Local\Temp\abaad55a7be87c3c03abeab64412a3a7de50cbbc448f6a8cdfdcad59c9cd7369.exe
"C:\Users\Admin\AppData\Local\Temp\abaad55a7be87c3c03abeab64412a3a7de50cbbc448f6a8cdfdcad59c9cd7369.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4204
- C:\Users\Admin\AppData\Local\Temp\abaad55a7be87c3c03abeab64412a3a7de50cbbc448f6a8cdfdcad59c9cd7369.exe
  start
  2⤵
  PID:5072
- C:\Users\Admin\AppData\Local\Temp\abaad55a7be87c3c03abeab64412a3a7de50cbbc448f6a8cdfdcad59c9cd7369.exe
  watch
  2⤵
  PID:4932

memory/4204-132-0x0000000000400000-0x000000000048A000-memory.dmp

Filesize
552KB

Download
memory/4204-135-0x0000000000400000-0x000000000048A000-memory.dmp

Filesize
552KB

Download
memory/4932-134-0x0000000000000000-mapping.dmp

Download
memory/4932-137-0x0000000000400000-0x000000000048A000-memory.dmp

Filesize
552KB

Download
memory/4932-138-0x0000000000400000-0x000000000048A000-memory.dmp

Filesize
552KB

Download
memory/4932-141-0x0000000000400000-0x000000000048A000-memory.dmp

Filesize
552KB

Download
memory/5072-133-0x0000000000000000-mapping.dmp

Download
memory/5072-136-0x0000000000400000-0x000000000048A000-memory.dmp

Filesize
552KB

Download
memory/5072-139-0x0000000000400000-0x000000000048A000-memory.dmp

Filesize
552KB

Download
memory/5072-140-0x0000000000400000-0x000000000048A000-memory.dmp

Filesize
552KB

Download