2bef93aad51665599c2ace51b44d7140933d426199a81171f8022a9b053b17b1

Analysis

max time kernel
143s
max time network
191s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
05-12-2022 08:04

Target

2bef93aad51665599c2ace51b44d7140933d426199a81171f8022a9b053b17b1.exe
Size

54KB
MD5

89528e29aa11a5ffb090f30d5422199c
SHA1

6ccaa5a787f2c0d41fab2e0878e3412fc3d82ac7
SHA256

2bef93aad51665599c2ace51b44d7140933d426199a81171f8022a9b053b17b1
SHA512

fc864284f96cb79d96916e70aa0c5d58c7aa66a445f5490c7e023a2075510dbb85f6bdb887b15e644c43670694b1cbe7d8eba2b3f6bfe8bcd9592a5bf12beb0b
SSDEEP

768:nevFIYm0on6HGavZRtQffoaFNnioeQpYG3ua/k/Uz3nvnUIh+Dt6FBAThfbAVT8g:acV6HGavqgaJuQwqfU6BFchfUWIv

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2728 wrote to memory of 2376	2728	2bef93aad51665599c2ace51b44d7140933d426199a81171f8022a9b053b17b1.exe	50
PID 2728 wrote to memory of 2376	2728	2bef93aad51665599c2ace51b44d7140933d426199a81171f8022a9b053b17b1.exe	50
PID 2728 wrote to memory of 2376	2728	2bef93aad51665599c2ace51b44d7140933d426199a81171f8022a9b053b17b1.exe	50
PID 2728 wrote to memory of 2376	2728	2bef93aad51665599c2ace51b44d7140933d426199a81171f8022a9b053b17b1.exe	50

memory/2376-134-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/2728-132-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2728-133-0x0000000010000000-0x0000000010012000-memory.dmp

Filesize
72KB

Download
memory/2728-135-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2728-136-0x0000000010000000-0x0000000010012000-memory.dmp

Filesize
72KB

Download