660a6eae9e54c171ae0af8715a139dca208d681ab8387e1bbb549f32a272db85

Analysis

max time kernel
91s
max time network
129s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
05/02/2023, 20:56

Target

audiorelay-0.26.3.exe
Size

67.0MB
MD5

38d740dec76b5e54be34a9525b480f07
SHA1

9409ac288cbacece7a67a0eec279041fbb0d3224
SHA256

660a6eae9e54c171ae0af8715a139dca208d681ab8387e1bbb549f32a272db85
SHA512

396c933cd8eebd8d976125285353e504d8b746098f98ff3dbf101be5297dfea0eb9a67b5dba67a93c7419d4d7d8d458c646930e3862b16fa06680a87daaab70e
SSDEEP

1572864:yE29MvoOZ/g1ncgWqG7jhMPLO5pMtl+6JooujuppK:yQ1g1RSFcApM3a4K

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
4980	audiorelay-0.26.3.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1344 wrote to memory of 4980	1344	audiorelay-0.26.3.exe	82
PID 1344 wrote to memory of 4980	1344	audiorelay-0.26.3.exe	82
PID 1344 wrote to memory of 4980	1344	audiorelay-0.26.3.exe	82

C:\Users\Admin\AppData\Local\Temp\audiorelay-0.26.3.exe
"C:\Users\Admin\AppData\Local\Temp\audiorelay-0.26.3.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1344
- C:\Users\Admin\AppData\Local\Temp\is-PIMG7.tmp\audiorelay-0.26.3.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-PIMG7.tmp\audiorelay-0.26.3.tmp" /SL5="$701C8,69350757,807936,C:\Users\Admin\AppData\Local\Temp\audiorelay-0.26.3.exe"
  2⤵
  - Executes dropped EXE
  PID:4980

C:\Users\Admin\AppData\Local\Temp\is-PIMG7.tmp\audiorelay-0.26.3.tmp

Filesize
3.0MB

MD5
d23c4889083bffb5745018940106188f

SHA1
5db1ec5c44338ef81bc19a62fd30b28ee9e878c7

SHA256
744b1df190de846db4a043489475ab70c914d53bb9697ee27e6769e72912accd

SHA512
c468a9aa4085cb0458171d4c8cca46aad0e5bd49fb87f9b88ceeaf1c1997d1f654d9b3f1e4a6eab8240e3f1319059ef9f0cba03184e00f1119d1dfa205709743

Download Submit
memory/1344-132-0x0000000000400000-0x00000000004D2000-memory.dmp

Filesize
840KB

Download
memory/1344-134-0x0000000000400000-0x00000000004D2000-memory.dmp

Filesize
840KB

Download
memory/1344-137-0x0000000000400000-0x00000000004D2000-memory.dmp

Filesize
840KB

Download