0eb590f3f1ae6f0fc75318e6e1d41fe14a699f7fedb54a225c4effac73751747

Analysis

max time kernel
167s
max time network
181s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
27-11-2022 15:56

Target

subway_surfers_v_3_5_6_44816_2012_pc_tfile_ru.exe
Size

507KB
MD5

97a775a5fe7a4ee56ab24ee6bbaa6c25
SHA1

f69ffcb9dd5b46018a80b3204f6873d4dfc7b976
SHA256

b38c5f5ee98cadf5381cc4e13878b45dc6945bd2d69bb5a6d4846f3de8f20f84
SHA512

0319220d9ba896f2832ac85721b93130770eb02ce5e79f2fb5f4818c1df703e3b195d9244707f1012028d68b482d500cba5ed66e51e624a74c098c80ee8ec1a5
SSDEEP

6144:CWE62xch7DojoYB7NdWwRd9PfRWCAh5kx5lDSCt8tSEWeLCzIcN5fcFkJrIVDW:Ou+M0NkwD6ZHk9Lt8oT9z4BRW

Score

1^/10

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 400 wrote to memory of 116	400	subway_surfers_v_3_5_6_44816_2012_pc_tfile_ru.exe	85
PID 400 wrote to memory of 116	400	subway_surfers_v_3_5_6_44816_2012_pc_tfile_ru.exe	85
PID 400 wrote to memory of 116	400	subway_surfers_v_3_5_6_44816_2012_pc_tfile_ru.exe	85
PID 400 wrote to memory of 220	400	subway_surfers_v_3_5_6_44816_2012_pc_tfile_ru.exe	86
PID 400 wrote to memory of 220	400	subway_surfers_v_3_5_6_44816_2012_pc_tfile_ru.exe	86
PID 400 wrote to memory of 220	400	subway_surfers_v_3_5_6_44816_2012_pc_tfile_ru.exe	86

C:\Users\Admin\AppData\Local\Temp\subway_surfers_v_3_5_6_44816_2012_pc_tfile_ru.exe
"C:\Users\Admin\AppData\Local\Temp\subway_surfers_v_3_5_6_44816_2012_pc_tfile_ru.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:400
- C:\Users\Admin\AppData\Local\Temp\subway_surfers_v_3_5_6_44816_2012_pc_tfile_ru.exe
  start
  2⤵
  PID:116
- C:\Users\Admin\AppData\Local\Temp\subway_surfers_v_3_5_6_44816_2012_pc_tfile_ru.exe
  watch
  2⤵
  PID:220

memory/116-136-0x0000000000400000-0x0000000000484000-memory.dmp

Filesize
528KB

Download
memory/116-138-0x0000000000400000-0x0000000000484000-memory.dmp

Filesize
528KB

Download
memory/116-139-0x0000000000400000-0x0000000000484000-memory.dmp

Filesize
528KB

Download
memory/116-141-0x0000000000400000-0x0000000000484000-memory.dmp

Filesize
528KB

Download
memory/220-137-0x0000000000400000-0x0000000000484000-memory.dmp

Filesize
528KB

Download
memory/220-140-0x0000000000400000-0x0000000000484000-memory.dmp

Filesize
528KB

Download
memory/220-142-0x0000000000400000-0x0000000000484000-memory.dmp

Filesize
528KB

Download
memory/400-132-0x0000000000400000-0x0000000000484000-memory.dmp

Filesize
528KB

Download
memory/400-135-0x0000000000400000-0x0000000000484000-memory.dmp

Filesize
528KB

Download