6e9090e2d51312e27201c93ee332ea6d1aa5956b61a2402906bb83a9785c33c3

Analysis

max time kernel
103s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
12/01/2023, 16:49

Target

setup_iggtech.com.exe
Size

97.9MB
MD5

798c4e41a71e09befa8fb633b154bdde
SHA1

5451aa36ba5292c188eb7f11c256dc996f3f6a1f
SHA256

6e9090e2d51312e27201c93ee332ea6d1aa5956b61a2402906bb83a9785c33c3
SHA512

b98353e9d3036e33d3ead39978ca7c3ac046006eef610f7cd078538385cbcc429674a9f662f0f8028c55194131be527b5872b1186b59e8009239d78899337e2e
SSDEEP

3145728:FVL2DGG+APG2jqlIVaUW7n6j0RTFB96XCLDq2v:3LxYtNW269

Score

8^/10

Executes dropped EXE 1 IoCs

pid	Process
4236	setup_iggtech.com.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2040 wrote to memory of 4236	2040	setup_iggtech.com.exe	82
PID 2040 wrote to memory of 4236	2040	setup_iggtech.com.exe	82
PID 2040 wrote to memory of 4236	2040	setup_iggtech.com.exe	82

C:\Users\Admin\AppData\Local\Temp\setup_iggtech.com.exe
"C:\Users\Admin\AppData\Local\Temp\setup_iggtech.com.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2040
- C:\Users\Admin\AppData\Local\Temp\is-6IM1E.tmp\setup_iggtech.com.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-6IM1E.tmp\setup_iggtech.com.tmp" /SL5="$90040,101767107,1186816,C:\Users\Admin\AppData\Local\Temp\setup_iggtech.com.exe"
  2⤵
  - Executes dropped EXE
  PID:4236

C:\Users\Admin\AppData\Local\Temp\is-6IM1E.tmp\setup_iggtech.com.tmp

Filesize
2.8MB

MD5
ebfeb5586d9d2acbd0cbd6fddb1b4762

SHA1
f1ae7f7347f9356abd8011141ee86b3931b9c5a1

SHA256
1c613b4212df32d820d7502add80da51fd7879932e303040b6090a05b9a01e2b

SHA512
9acaac60ca6bbf5b9ce0180bbb6263d9210f1a62757debbf04703b7e1ea7476be92270d1799a0556760f43f6a023d8d99ecf704abf8b947024dbf2e02b884952

Download Submit
memory/2040-132-0x0000000000400000-0x000000000052F000-memory.dmp

Filesize
1.2MB

Download
memory/2040-136-0x0000000000400000-0x000000000052F000-memory.dmp

Filesize
1.2MB

Download
memory/2040-137-0x0000000000400000-0x000000000052F000-memory.dmp

Filesize
1.2MB

Download