aaf5fb5b0a0ac1d10d63f35c333019e68632d2ffd568edb62521384583b5ecd1

Analysis

max time kernel
150s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
27/11/2022, 13:01

Target

aaf5fb5b0a0ac1d10d63f35c333019e68632d2ffd568edb62521384583b5ecd1.exe
Size

503KB
MD5

3cdc3aae8cd09adcc5ac8af73215bc29
SHA1

689bbd0ad74b7a3ce16186cdae7598ab7ad501a5
SHA256

aaf5fb5b0a0ac1d10d63f35c333019e68632d2ffd568edb62521384583b5ecd1
SHA512

7b95ac814311a5fcdba2b7e04bfdc13d54b21edee2966f4e6a3c6999fd2860e7a0734edc69d513963d11bac9cd5fece572f6fd5dce614af241dc2e03c3bfef66
SSDEEP

6144:e3HGTUW468soopJkzfeaxuTcAztSwRPEfWx9MOI3V0XpePlgzsJeFURt7t3SScnt:IHWIHcSzHxulhSIEO0uXEXJeW3SvnPV

Score

1^/10

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 3540 wrote to memory of 4540	3540	aaf5fb5b0a0ac1d10d63f35c333019e68632d2ffd568edb62521384583b5ecd1.exe	85
PID 3540 wrote to memory of 4540	3540	aaf5fb5b0a0ac1d10d63f35c333019e68632d2ffd568edb62521384583b5ecd1.exe	85
PID 3540 wrote to memory of 4540	3540	aaf5fb5b0a0ac1d10d63f35c333019e68632d2ffd568edb62521384583b5ecd1.exe	85
PID 3540 wrote to memory of 1304	3540	aaf5fb5b0a0ac1d10d63f35c333019e68632d2ffd568edb62521384583b5ecd1.exe	86
PID 3540 wrote to memory of 1304	3540	aaf5fb5b0a0ac1d10d63f35c333019e68632d2ffd568edb62521384583b5ecd1.exe	86
PID 3540 wrote to memory of 1304	3540	aaf5fb5b0a0ac1d10d63f35c333019e68632d2ffd568edb62521384583b5ecd1.exe	86

C:\Users\Admin\AppData\Local\Temp\aaf5fb5b0a0ac1d10d63f35c333019e68632d2ffd568edb62521384583b5ecd1.exe
"C:\Users\Admin\AppData\Local\Temp\aaf5fb5b0a0ac1d10d63f35c333019e68632d2ffd568edb62521384583b5ecd1.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3540
- C:\Users\Admin\AppData\Local\Temp\aaf5fb5b0a0ac1d10d63f35c333019e68632d2ffd568edb62521384583b5ecd1.exe
  start
  2⤵
  PID:4540
- C:\Users\Admin\AppData\Local\Temp\aaf5fb5b0a0ac1d10d63f35c333019e68632d2ffd568edb62521384583b5ecd1.exe
  watch
  2⤵
  PID:1304

memory/1304-137-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download
memory/1304-138-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download
memory/1304-141-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download
memory/1304-143-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download
memory/3540-132-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download
memory/3540-135-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download
memory/4540-136-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download
memory/4540-139-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download
memory/4540-140-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download
memory/4540-142-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download