924e686e0a427c74ace7f413502f5fc72e8a4321ed652370d566710d822cac05

Analysis

max time kernel
155s
max time network
170s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
29-11-2022 05:21

Target

924e686e0a427c74ace7f413502f5fc72e8a4321ed652370d566710d822cac05.exe
Size

56KB
MD5

51f8e60419bf83ffe0ffa4c295a01b26
SHA1

33ed09f307d9087640fdb61a40764306aa9faa7a
SHA256

924e686e0a427c74ace7f413502f5fc72e8a4321ed652370d566710d822cac05
SHA512

4bbc262f946110341d81376e2fd7015c85c8931f0cf3d572705032f0b39b9996513eb95fee8bd7a8b67aed07ca39a51145826666d9e7573b22c8b535a9f36a55
SSDEEP

1536:JcmnxZdCqM8xV4bGIuXHEgHOh29avVTskg:JTxZdCc2ZZhK8W

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4236 wrote to memory of 1116	4236	924e686e0a427c74ace7f413502f5fc72e8a4321ed652370d566710d822cac05.exe	80
PID 4236 wrote to memory of 1116	4236	924e686e0a427c74ace7f413502f5fc72e8a4321ed652370d566710d822cac05.exe	80
PID 4236 wrote to memory of 1116	4236	924e686e0a427c74ace7f413502f5fc72e8a4321ed652370d566710d822cac05.exe	80

C:\Users\Admin\AppData\Local\Temp\924e686e0a427c74ace7f413502f5fc72e8a4321ed652370d566710d822cac05.exe
"C:\Users\Admin\AppData\Local\Temp\924e686e0a427c74ace7f413502f5fc72e8a4321ed652370d566710d822cac05.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4236
- C:\Users\Admin\AppData\Local\Temp\924e686e0a427c74ace7f413502f5fc72e8a4321ed652370d566710d822cac05.exe
  C:\Users\Admin\AppData\Local\Temp\924e686e0a427c74a" 48
  2⤵
  PID:1116

memory/1116-135-0x0000000000000000-mapping.dmp

Download
memory/1116-136-0x0000000010000000-0x000000001000C000-memory.dmp

Filesize
48KB

Download