92a45c5988c0454568085bd5145893a0d98c9398d533d602377931fb6ea9d0c7

Analysis

max time kernel
303s
max time network
339s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
01/12/2022, 01:12

Target

92a45c5988c0454568085bd5145893a0d98c9398d533d602377931fb6ea9d0c7.exe
Size

167KB
MD5

9fa2033f720a30059c718260a6c68189
SHA1

74b781628793a258a5fffa3c7e8b3f72c65c9316
SHA256

92a45c5988c0454568085bd5145893a0d98c9398d533d602377931fb6ea9d0c7
SHA512

a8452c8433cfef84eb2f0f1818b311a16d1574cf2ba5819e81e3c849a9a3b2a963a4f7ce7d16d5007357bdf2f32692f9798a35f74889228307a3c25051bdec76
SSDEEP

3072:ks2y0Ng43WxLp17r1c3Q1en6oYtFAFKHVIloR8Tp17r1c3Q1en6oYtFAFKm:wyagQGNRi3Q1enA78e8VRi3Q1enA7g

Score

1^/10

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
388	92a45c5988c0454568085bd5145893a0d98c9398d533d602377931fb6ea9d0c7.exe

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 388 wrote to memory of 2708	388	92a45c5988c0454568085bd5145893a0d98c9398d533d602377931fb6ea9d0c7.exe	80
PID 388 wrote to memory of 2708	388	92a45c5988c0454568085bd5145893a0d98c9398d533d602377931fb6ea9d0c7.exe	80
PID 388 wrote to memory of 2708	388	92a45c5988c0454568085bd5145893a0d98c9398d533d602377931fb6ea9d0c7.exe	80
PID 388 wrote to memory of 2708	388	92a45c5988c0454568085bd5145893a0d98c9398d533d602377931fb6ea9d0c7.exe	80
PID 388 wrote to memory of 2708	388	92a45c5988c0454568085bd5145893a0d98c9398d533d602377931fb6ea9d0c7.exe	80

memory/388-132-0x00000000009E0000-0x00000000009F3000-memory.dmp

Filesize
76KB

Download
memory/388-133-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download
memory/388-134-0x00000000009E0000-0x00000000009F3000-memory.dmp

Filesize
76KB

Download
memory/388-136-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download
memory/388-137-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download