cb175be90610e21a261d8d83664f948c1e73ec8855e7973047c41e07b9540c68

Analysis

max time kernel
45s
max time network
54s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
01/12/2022, 10:12

Target

cb175be90610e21a261d8d83664f948c1e73ec8855e7973047c41e07b9540c68.exe
Size

55KB
MD5

793672919079527e4fffeb1c3a314da8
SHA1

3fe5cb49e9b6b6d156e3462286b394e9619baf3f
SHA256

cb175be90610e21a261d8d83664f948c1e73ec8855e7973047c41e07b9540c68
SHA512

96d7b1ae9b519eea07cf08e9dbcf6bf43cf2c327398855a91f8648639cef215707916be422addcf7f7a25a7fee5a73f9c83ab9e8b966d3582f1a963c88efac05
SSDEEP

768:zIPfXOhlKoLxtCt74y/842kGim5admgS0CX0M0WhohxWboJVyVKUuPnfc2T+u:4CKoLD+h/84UimkdxM0Weh9JQKb3

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1896	cb175be90610e21a261d8d83664f948c1e73ec8855e7973047c41e07b9540c68.exe
1896	cb175be90610e21a261d8d83664f948c1e73ec8855e7973047c41e07b9540c68.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1896 wrote to memory of 1244	1896	cb175be90610e21a261d8d83664f948c1e73ec8855e7973047c41e07b9540c68.exe	10
PID 1896 wrote to memory of 1244	1896	cb175be90610e21a261d8d83664f948c1e73ec8855e7973047c41e07b9540c68.exe	10
PID 1896 wrote to memory of 1244	1896	cb175be90610e21a261d8d83664f948c1e73ec8855e7973047c41e07b9540c68.exe	10
PID 1896 wrote to memory of 1244	1896	cb175be90610e21a261d8d83664f948c1e73ec8855e7973047c41e07b9540c68.exe	10

memory/1244-56-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/1896-54-0x0000000000400000-0x0000000000408960-memory.dmp

Filesize
34KB

Download
memory/1896-55-0x0000000076181000-0x0000000076183000-memory.dmp

Filesize
8KB

Download
memory/1896-59-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download