4396d947ac3ff4f98ab0e0650a96d85a47480de9097c5528819dba55f32b7dfc

Analysis

max time kernel
91s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
01/12/2022, 10:08

Target

4396d947ac3ff4f98ab0e0650a96d85a47480de9097c5528819dba55f32b7dfc.exe
Size

31KB
MD5

aabaec7e2a286aafd088eb0757cc39bc
SHA1

5d4db93d6c594c641352dd0a2e595280d52cd5de
SHA256

4396d947ac3ff4f98ab0e0650a96d85a47480de9097c5528819dba55f32b7dfc
SHA512

d1f902eed9092be98be0b78f25b4a051556da42cb7f9d1ac34fb2f1e174e41b09af6c4e15050142eb71bbb35c8022f97441c4f5078633cc7d73ed7afe85b03a0
SSDEEP

768:Z+h7TzTBziifTeiZSVWihwEknh0L7OTLeNfQfF:kZ/nEkh8OTKN0

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
2816	4396d947ac3ff4f98ab0e0650a96d85a47480de9097c5528819dba55f32b7dfc.exe
2816	4396d947ac3ff4f98ab0e0650a96d85a47480de9097c5528819dba55f32b7dfc.exe
2816	4396d947ac3ff4f98ab0e0650a96d85a47480de9097c5528819dba55f32b7dfc.exe
2816	4396d947ac3ff4f98ab0e0650a96d85a47480de9097c5528819dba55f32b7dfc.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2816 wrote to memory of 2792	2816	4396d947ac3ff4f98ab0e0650a96d85a47480de9097c5528819dba55f32b7dfc.exe	42
PID 2816 wrote to memory of 2792	2816	4396d947ac3ff4f98ab0e0650a96d85a47480de9097c5528819dba55f32b7dfc.exe	42
PID 2816 wrote to memory of 2792	2816	4396d947ac3ff4f98ab0e0650a96d85a47480de9097c5528819dba55f32b7dfc.exe	42
PID 2816 wrote to memory of 2792	2816	4396d947ac3ff4f98ab0e0650a96d85a47480de9097c5528819dba55f32b7dfc.exe	42

memory/2792-133-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/2816-132-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2816-134-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2816-135-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download