9fe2d8f69a423a65d97f2e998db6dffb84cf22f2c9e829141df8415003f92d84

Analysis

max time kernel
91s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
04-12-2022 09:44

Target

9fe2d8f69a423a65d97f2e998db6dffb84cf22f2c9e829141df8415003f92d84.exe
Size

148KB
MD5

17a0beababcaaf694955ff4ee45c70e1
SHA1

0571a3ec1fb49547742f8f1bd29bf26b18cdba81
SHA256

9fe2d8f69a423a65d97f2e998db6dffb84cf22f2c9e829141df8415003f92d84
SHA512

fc057021afe0a9585a3d64db7b88c54fec583f4db91441389090dff95a104452549b93181312a320f2ddd6a827f5f42048aca4463c2f5940508130320c0ea9d4
SSDEEP

3072:phPsX1IZ1UXAD3MKqw17UB7GRHSgS3lf5XVKTfzyY9aJw:DsQRiFvBVQt9a

Score

1^/10

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
1724	9fe2d8f69a423a65d97f2e998db6dffb84cf22f2c9e829141df8415003f92d84.exe

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 1724 wrote to memory of 1456	1724	9fe2d8f69a423a65d97f2e998db6dffb84cf22f2c9e829141df8415003f92d84.exe	82
PID 1724 wrote to memory of 1456	1724	9fe2d8f69a423a65d97f2e998db6dffb84cf22f2c9e829141df8415003f92d84.exe	82
PID 1724 wrote to memory of 1456	1724	9fe2d8f69a423a65d97f2e998db6dffb84cf22f2c9e829141df8415003f92d84.exe	82
PID 1724 wrote to memory of 1456	1724	9fe2d8f69a423a65d97f2e998db6dffb84cf22f2c9e829141df8415003f92d84.exe	82
PID 1724 wrote to memory of 1456	1724	9fe2d8f69a423a65d97f2e998db6dffb84cf22f2c9e829141df8415003f92d84.exe	82

memory/1456-132-0x0000000000000000-mapping.dmp

Download
memory/1724-133-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download