2b9f8a837bcf83f96efd6f6da10ffc8ed85d57d4db93626a84f2cccb9b3a3a34

Analysis

max time kernel
187s
max time network
165s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
27/11/2022, 17:52

Target

2b9f8a837bcf83f96efd6f6da10ffc8ed85d57d4db93626a84f2cccb9b3a3a34.exe
Size

484KB
MD5

e1e84bcdbcfc1589bb460648a85233b2
SHA1

e91fe09b36bc3011af284ba7539d856caaa9c458
SHA256

2b9f8a837bcf83f96efd6f6da10ffc8ed85d57d4db93626a84f2cccb9b3a3a34
SHA512

ad5aa1baeb37bd72ac4e65802bd6dd657fa9fb7152d7cfefe1908526bd386fd75108c39f31a31a5ea01c4ad08656409cfb6169960e2cc9bee6080d2bfb807402
SSDEEP

6144:rhqoeAJj+UJkUsdxAJmi6bvkMl722EcOzcI76Z/VLNBzNdDun3WARlYxmWhpZ80i:rkJasxAXwvjlCje5MfZ+WWayycAcu

Score

1^/10

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 3616 wrote to memory of 1392	3616	2b9f8a837bcf83f96efd6f6da10ffc8ed85d57d4db93626a84f2cccb9b3a3a34.exe	83
PID 3616 wrote to memory of 1392	3616	2b9f8a837bcf83f96efd6f6da10ffc8ed85d57d4db93626a84f2cccb9b3a3a34.exe	83
PID 3616 wrote to memory of 1392	3616	2b9f8a837bcf83f96efd6f6da10ffc8ed85d57d4db93626a84f2cccb9b3a3a34.exe	83
PID 3616 wrote to memory of 3436	3616	2b9f8a837bcf83f96efd6f6da10ffc8ed85d57d4db93626a84f2cccb9b3a3a34.exe	84
PID 3616 wrote to memory of 3436	3616	2b9f8a837bcf83f96efd6f6da10ffc8ed85d57d4db93626a84f2cccb9b3a3a34.exe	84
PID 3616 wrote to memory of 3436	3616	2b9f8a837bcf83f96efd6f6da10ffc8ed85d57d4db93626a84f2cccb9b3a3a34.exe	84

C:\Users\Admin\AppData\Local\Temp\2b9f8a837bcf83f96efd6f6da10ffc8ed85d57d4db93626a84f2cccb9b3a3a34.exe
"C:\Users\Admin\AppData\Local\Temp\2b9f8a837bcf83f96efd6f6da10ffc8ed85d57d4db93626a84f2cccb9b3a3a34.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3616
- C:\Users\Admin\AppData\Local\Temp\2b9f8a837bcf83f96efd6f6da10ffc8ed85d57d4db93626a84f2cccb9b3a3a34.exe
  start
  2⤵
  PID:1392
- C:\Users\Admin\AppData\Local\Temp\2b9f8a837bcf83f96efd6f6da10ffc8ed85d57d4db93626a84f2cccb9b3a3a34.exe
  watch
  2⤵
  PID:3436

memory/1392-137-0x0000000000400000-0x000000000047E000-memory.dmp

Filesize
504KB

Download
memory/1392-139-0x0000000000400000-0x000000000047E000-memory.dmp

Filesize
504KB

Download
memory/3436-136-0x0000000000400000-0x000000000047E000-memory.dmp

Filesize
504KB

Download
memory/3436-138-0x0000000000400000-0x000000000047E000-memory.dmp

Filesize
504KB

Download
memory/3436-140-0x0000000000400000-0x000000000047E000-memory.dmp

Filesize
504KB

Download
memory/3616-132-0x0000000000400000-0x000000000047E000-memory.dmp

Filesize
504KB

Download
memory/3616-135-0x0000000000400000-0x000000000047E000-memory.dmp

Filesize
504KB

Download