b1c6d76924c4ecfb471dcbc95638fd44a200ca619a60848a9c5d92fa21b3bc3b

Analysis

max time kernel
2s
max time network
34s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
03/12/2022, 07:12

Target

b1c6d76924c4ecfb471dcbc95638fd44a200ca619a60848a9c5d92fa21b3bc3b.exe
Size

267KB
MD5

800ce5734a6764140668b00cf2e27264
SHA1

7f6a52740f0b4e997d319669f2cf4305fd7b599c
SHA256

b1c6d76924c4ecfb471dcbc95638fd44a200ca619a60848a9c5d92fa21b3bc3b
SHA512

4594bbebcab314b9825cbac75bef125fbd03fd18248b1a681da66a41def17d1240575b89c85686f8bff707157b1f85c06cf8b1e424fa37ac73a8ef13bb9940bd
SSDEEP

6144:xYWW/xRoiRPs2GeyDSdCOzJS+y0ERiYs9UwKntdnnu+:xYWW/xRfLGedC/0E+9UwKntdnn9

Score

1^/10

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
1368	b1c6d76924c4ecfb471dcbc95638fd44a200ca619a60848a9c5d92fa21b3bc3b.exe

C:\Users\Admin\AppData\Local\Temp\b1c6d76924c4ecfb471dcbc95638fd44a200ca619a60848a9c5d92fa21b3bc3b.exe
"C:\Users\Admin\AppData\Local\Temp\b1c6d76924c4ecfb471dcbc95638fd44a200ca619a60848a9c5d92fa21b3bc3b.exe"
1⤵
- Suspicious use of UnmapMainImage
PID:1368

memory/1368-55-0x0000000075931000-0x0000000075933000-memory.dmp

Filesize
8KB

Download
memory/1368-56-0x0000000000400000-0x0000000000439000-memory.dmp

Filesize
228KB

Download
memory/1368-58-0x0000000002170000-0x0000000002193000-memory.dmp

Filesize
140KB

Download