d29fbac92da97c7c5d66d6f1ab7f9da9baee318dddf91b6a34284d1b2ce7439e

Analysis

max time kernel
151s
max time network
173s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
06/12/2022, 07:54

Target

d29fbac92da97c7c5d66d6f1ab7f9da9baee318dddf91b6a34284d1b2ce7439e.exe
Size

132KB
MD5

06184693a5aaa9fbfaedd59983e44422
SHA1

d462857adeef890743a4cae9c4b009bb2f0e60fd
SHA256

d29fbac92da97c7c5d66d6f1ab7f9da9baee318dddf91b6a34284d1b2ce7439e
SHA512

fbf6462bea7a9aeff1d7941539ae618c06745cbf650b16b4e579e85ffe5c57ab1d5f5c12a4de21ebdd57fb1ffa42e0ac0db98226891ae25aa4b8040f2a1f8d64
SSDEEP

3072:D2B3b0KRMGEP68I+W5/LA2N5lOMUszPUDK/L:KBrXMGQ6bJ8rMUxDG

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1348 wrote to memory of 2236	1348	d29fbac92da97c7c5d66d6f1ab7f9da9baee318dddf91b6a34284d1b2ce7439e.exe	85
PID 1348 wrote to memory of 2236	1348	d29fbac92da97c7c5d66d6f1ab7f9da9baee318dddf91b6a34284d1b2ce7439e.exe	85
PID 1348 wrote to memory of 2236	1348	d29fbac92da97c7c5d66d6f1ab7f9da9baee318dddf91b6a34284d1b2ce7439e.exe	85

C:\Users\Admin\AppData\Local\Temp\d29fbac92da97c7c5d66d6f1ab7f9da9baee318dddf91b6a34284d1b2ce7439e.exe
"C:\Users\Admin\AppData\Local\Temp\d29fbac92da97c7c5d66d6f1ab7f9da9baee318dddf91b6a34284d1b2ce7439e.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1348
- C:\Users\Admin\AppData\Local\Temp\d29fbac92da97c7c5d66d6f1ab7f9da9baee318dddf91b6a34284d1b2ce7439e.exe
  ?
  2⤵
  PID:2236

memory/1348-132-0x0000000000400000-0x0000000000427000-memory.dmp

Filesize
156KB

Download
memory/1348-134-0x0000000000400000-0x0000000000427000-memory.dmp

Filesize
156KB

Download