864ae233b7bf33f32c86f38b15c8298a932db5a95276fdd5ac3b059cbfd332cb

Analysis

max time kernel
183s
max time network
206s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
01/12/2022, 10:11

Target

864ae233b7bf33f32c86f38b15c8298a932db5a95276fdd5ac3b059cbfd332cb.exe
Size

31KB
MD5

b9e398258ce122ad0cee6abdcc085a78
SHA1

10a8a4b29de7a72c2130dc99b1614b75606d9eb2
SHA256

864ae233b7bf33f32c86f38b15c8298a932db5a95276fdd5ac3b059cbfd332cb
SHA512

395914770c4ec5356e5455a5da9f3ce9807af3aebf147bdac025c2166bfbf33597c77b22207ebd579ca7c5af52f1ec22a054e1b51aa69e9ba1e449c07197e43c
SSDEEP

768:Z+h7TzTBziifTeiZSVWihwEknh0L7OTLeNfQfV:kZ/nEkh8OTKNw

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1440	864ae233b7bf33f32c86f38b15c8298a932db5a95276fdd5ac3b059cbfd332cb.exe
1440	864ae233b7bf33f32c86f38b15c8298a932db5a95276fdd5ac3b059cbfd332cb.exe
1440	864ae233b7bf33f32c86f38b15c8298a932db5a95276fdd5ac3b059cbfd332cb.exe
1440	864ae233b7bf33f32c86f38b15c8298a932db5a95276fdd5ac3b059cbfd332cb.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1440 wrote to memory of 684	1440	864ae233b7bf33f32c86f38b15c8298a932db5a95276fdd5ac3b059cbfd332cb.exe	39
PID 1440 wrote to memory of 684	1440	864ae233b7bf33f32c86f38b15c8298a932db5a95276fdd5ac3b059cbfd332cb.exe	39
PID 1440 wrote to memory of 684	1440	864ae233b7bf33f32c86f38b15c8298a932db5a95276fdd5ac3b059cbfd332cb.exe	39
PID 1440 wrote to memory of 684	1440	864ae233b7bf33f32c86f38b15c8298a932db5a95276fdd5ac3b059cbfd332cb.exe	39

memory/684-133-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/1440-132-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1440-134-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1440-135-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download