0eb590f3f1ae6f0fc75318e6e1d41fe14a699f7fedb54a225c4effac73751747

Analysis

max time kernel
36s
max time network
64s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
27/11/2022, 15:56

Target

subway_surfers_v_3_5_6_44816_2012_pc_tfile_ru.exe
Size

507KB
MD5

97a775a5fe7a4ee56ab24ee6bbaa6c25
SHA1

f69ffcb9dd5b46018a80b3204f6873d4dfc7b976
SHA256

b38c5f5ee98cadf5381cc4e13878b45dc6945bd2d69bb5a6d4846f3de8f20f84
SHA512

0319220d9ba896f2832ac85721b93130770eb02ce5e79f2fb5f4818c1df703e3b195d9244707f1012028d68b482d500cba5ed66e51e624a74c098c80ee8ec1a5
SSDEEP

6144:CWE62xch7DojoYB7NdWwRd9PfRWCAh5kx5lDSCt8tSEWeLCzIcN5fcFkJrIVDW:Ou+M0NkwD6ZHk9Lt8oT9z4BRW

Score

1^/10

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 1504 wrote to memory of 1552	1504	subway_surfers_v_3_5_6_44816_2012_pc_tfile_ru.exe	28
PID 1504 wrote to memory of 1552	1504	subway_surfers_v_3_5_6_44816_2012_pc_tfile_ru.exe	28
PID 1504 wrote to memory of 1552	1504	subway_surfers_v_3_5_6_44816_2012_pc_tfile_ru.exe	28
PID 1504 wrote to memory of 1552	1504	subway_surfers_v_3_5_6_44816_2012_pc_tfile_ru.exe	28
PID 1504 wrote to memory of 1516	1504	subway_surfers_v_3_5_6_44816_2012_pc_tfile_ru.exe	29
PID 1504 wrote to memory of 1516	1504	subway_surfers_v_3_5_6_44816_2012_pc_tfile_ru.exe	29
PID 1504 wrote to memory of 1516	1504	subway_surfers_v_3_5_6_44816_2012_pc_tfile_ru.exe	29
PID 1504 wrote to memory of 1516	1504	subway_surfers_v_3_5_6_44816_2012_pc_tfile_ru.exe	29

C:\Users\Admin\AppData\Local\Temp\subway_surfers_v_3_5_6_44816_2012_pc_tfile_ru.exe
"C:\Users\Admin\AppData\Local\Temp\subway_surfers_v_3_5_6_44816_2012_pc_tfile_ru.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1504
- C:\Users\Admin\AppData\Local\Temp\subway_surfers_v_3_5_6_44816_2012_pc_tfile_ru.exe
  start
  2⤵
  PID:1552
- C:\Users\Admin\AppData\Local\Temp\subway_surfers_v_3_5_6_44816_2012_pc_tfile_ru.exe
  watch
  2⤵
  PID:1516

memory/1504-54-0x0000000075C81000-0x0000000075C83000-memory.dmp

Filesize
8KB

Download
memory/1504-59-0x0000000000400000-0x0000000000484000-memory.dmp

Filesize
528KB

Download
memory/1516-61-0x0000000000400000-0x0000000000484000-memory.dmp

Filesize
528KB

Download
memory/1516-62-0x0000000000400000-0x0000000000484000-memory.dmp

Filesize
528KB

Download
memory/1516-65-0x0000000000400000-0x0000000000484000-memory.dmp

Filesize
528KB

Download
memory/1552-60-0x0000000000400000-0x0000000000484000-memory.dmp

Filesize
528KB

Download
memory/1552-63-0x0000000000400000-0x0000000000484000-memory.dmp

Filesize
528KB

Download
memory/1552-64-0x0000000000400000-0x0000000000484000-memory.dmp

Filesize
528KB

Download