d935c40dd215e5279eb894fb88b4afc626b35da47b247f92efceac5f811af59e

Resubmissions

08/02/2023, 20:19

08/02/2023, 19:59

max time kernel
144s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
08/02/2023, 19:59

Target

Google Maps.exe
Size

656.2MB
MD5

7f4be2a8d3ec73342f2a0dcbd7a84e2a
SHA1

9db7f64aad18afe9d87be2a0b7e549fbb0660a71
SHA256

00d229235da51b0f6d665760fbcd8c07b553cbc2483cdf11332d39f577ff4543
SHA512

4baf4e050fb7859def04ab9e3776b315d58bd553e3eea35636a633f7a4922e6c647f3eea1141fe2749bf0f9da95e4e4bdced624ccf90c685c9fb3a72232538b9
SSDEEP

3072:5yliOufWjoQCJhHUgpgHDSnlqt5ioPOlzuBSUq3GEzVT7O1i0vkWe6e5Lv:5yl0f7QCJNQDS253PhBSHv5W19kzv

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1052 set thread context of 3248	1052	Google Maps.exe	80

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 1052 wrote to memory of 3248	1052	Google Maps.exe	80
PID 1052 wrote to memory of 3248	1052	Google Maps.exe	80
PID 1052 wrote to memory of 3248	1052	Google Maps.exe	80
PID 1052 wrote to memory of 3248	1052	Google Maps.exe	80
PID 1052 wrote to memory of 3248	1052	Google Maps.exe	80
PID 1052 wrote to memory of 3248	1052	Google Maps.exe	80
PID 1052 wrote to memory of 3248	1052	Google Maps.exe	80
PID 1052 wrote to memory of 3248	1052	Google Maps.exe	80

C:\Users\Admin\AppData\Local\Temp\Google Maps.exe
"C:\Users\Admin\AppData\Local\Temp\Google Maps.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:1052
- C:\Users\Admin\AppData\Local\Temp\Google Maps.exe
  "C:\Users\Admin\AppData\Local\Temp\Google Maps.exe"
  2⤵
  PID:3248

memory/1052-132-0x0000000000BF0000-0x0000000000C22000-memory.dmp

Filesize
200KB

Download
memory/1052-133-0x0000000005B20000-0x00000000060C4000-memory.dmp

Filesize
5.6MB

Download
memory/1052-134-0x00000000055E0000-0x0000000005646000-memory.dmp

Filesize
408KB

Download
memory/3248-136-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download
memory/3248-138-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download
memory/3248-139-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download