b52dc4b0fa2f1fe987ae050b4b8fed636c297a295fdeee6639291b324e72f141

Analysis

max time kernel
60s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
05/12/2022, 19:19

Target

b52dc4b0fa2f1fe987ae050b4b8fed636c297a295fdeee6639291b324e72f141.exe
Size

156KB
MD5

3caff2cc89398f47794b2f6a1c601e7e
SHA1

e8bfb567ada2ae1dd4f4aceb4ec122c5e6807ef7
SHA256

b52dc4b0fa2f1fe987ae050b4b8fed636c297a295fdeee6639291b324e72f141
SHA512

5c1501aa99cbcd4345f8b2a8e1474a0adcb33968b08c3193190a375020883b227f84a7e1c18699966ac8dfb09195d082cdbc65b3af26dbf3f4fa0a97b5e2ee0a
SSDEEP

3072:i6xJIJE/FyNKFebNRHwIN90V4Bm1VC60e1FR6PNbIk1LNFnk:ikJRcNKQRjNWR1YuFRIv1LNFk

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1740	b52dc4b0fa2f1fe987ae050b4b8fed636c297a295fdeee6639291b324e72f141.exe
1740	b52dc4b0fa2f1fe987ae050b4b8fed636c297a295fdeee6639291b324e72f141.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 1740 wrote to memory of 1212	1740	b52dc4b0fa2f1fe987ae050b4b8fed636c297a295fdeee6639291b324e72f141.exe	17
PID 1740 wrote to memory of 1212	1740	b52dc4b0fa2f1fe987ae050b4b8fed636c297a295fdeee6639291b324e72f141.exe	17
PID 1740 wrote to memory of 1212	1740	b52dc4b0fa2f1fe987ae050b4b8fed636c297a295fdeee6639291b324e72f141.exe	17
PID 1740 wrote to memory of 1212	1740	b52dc4b0fa2f1fe987ae050b4b8fed636c297a295fdeee6639291b324e72f141.exe	17
PID 1740 wrote to memory of 1212	1740	b52dc4b0fa2f1fe987ae050b4b8fed636c297a295fdeee6639291b324e72f141.exe	17
PID 1740 wrote to memory of 1212	1740	b52dc4b0fa2f1fe987ae050b4b8fed636c297a295fdeee6639291b324e72f141.exe	17

memory/1212-62-0x000000007EFC0000-0x000000007EFC6000-memory.dmp

Filesize
24KB

Download
memory/1740-54-0x0000000000400000-0x0000000000427000-memory.dmp

Filesize
156KB

Download
memory/1740-55-0x0000000076261000-0x0000000076263000-memory.dmp

Filesize
8KB

Download
memory/1740-56-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download
memory/1740-57-0x0000000000400000-0x0000000000427000-memory.dmp

Filesize
156KB

Download
memory/1740-58-0x00000000002A0000-0x00000000002A4000-memory.dmp

Filesize
16KB

Download
memory/1740-59-0x00000000002E0000-0x0000000000319000-memory.dmp

Filesize
228KB

Download
memory/1740-60-0x0000000002001000-0x0000000002005000-memory.dmp

Filesize
16KB

Download
memory/1740-61-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download
memory/1740-65-0x00000000002E0000-0x0000000000319000-memory.dmp

Filesize
228KB

Download