6e2d2b51811acf711f7b08bac1a3edae0691375a58a755c6599f0988aed52153

Analysis

max time kernel
106s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
01-12-2022 23:01

Target

6e2d2b51811acf711f7b08bac1a3edae0691375a58a755c6599f0988aed52153.exe
Size

136KB
MD5

a225357e96c6512fed0526581cd08c2a
SHA1

14becc1f0bac6fb41d4ac6f89d75615b22580769
SHA256

6e2d2b51811acf711f7b08bac1a3edae0691375a58a755c6599f0988aed52153
SHA512

1cb509a97eb2102518f0b0b9c9a6e1413165194e46e32095d66b5c6e702517752415e9efb4978fdbf7e082d595154b6d4e2dc00e2e8b9d2af249243b3196686b
SSDEEP

3072:Jy+pt956NX+zsRa46Vah3B/j59rMy7Kr7bWn:UqfUXSNkl59rMy7KrOn

Score

1^/10

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
2532	6e2d2b51811acf711f7b08bac1a3edae0691375a58a755c6599f0988aed52153.exe

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 2532 wrote to memory of 4212	2532	6e2d2b51811acf711f7b08bac1a3edae0691375a58a755c6599f0988aed52153.exe	86
PID 2532 wrote to memory of 4212	2532	6e2d2b51811acf711f7b08bac1a3edae0691375a58a755c6599f0988aed52153.exe	86
PID 2532 wrote to memory of 4212	2532	6e2d2b51811acf711f7b08bac1a3edae0691375a58a755c6599f0988aed52153.exe	86
PID 2532 wrote to memory of 4212	2532	6e2d2b51811acf711f7b08bac1a3edae0691375a58a755c6599f0988aed52153.exe	86
PID 2532 wrote to memory of 4212	2532	6e2d2b51811acf711f7b08bac1a3edae0691375a58a755c6599f0988aed52153.exe	86

memory/2532-132-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download
memory/2532-134-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/4212-133-0x0000000000000000-mapping.dmp

Download