869f4ed1e8d24f51e236dd16e6a43327cb679e510b74cfc5ac14fe483d5696da

Analysis

max time kernel
165s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
14/06/2023, 10:03

Target

Setup RX Pro Audio Editor v10.3.0.exe
Size

616KB
MD5

256b023cacd2caa71772b8897f0ba13d
SHA1

f522f2fb6dec046acae2807dcc37c7e4dffb1c8e
SHA256

869f4ed1e8d24f51e236dd16e6a43327cb679e510b74cfc5ac14fe483d5696da
SHA512

563941a8c5635d93df1208f75d672aec26063b351fd7e7ff8a779487e068a0025f38240d8fce8af4910317ee424a60a59e63d25b802ddfd3a8decb39e5b0344d
SSDEEP

12288:uaHc64b888888888888W88888888888yCJwVldyAmWDjxiZl8zAeONQ9uZsnDmi/:F867CGRyAmS91BoQ9uZUR+zZdQ

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2692	Setup RX Pro Audio Editor v10.3.0.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 5112 wrote to memory of 2692	5112	Setup RX Pro Audio Editor v10.3.0.exe	83
PID 5112 wrote to memory of 2692	5112	Setup RX Pro Audio Editor v10.3.0.exe	83
PID 5112 wrote to memory of 2692	5112	Setup RX Pro Audio Editor v10.3.0.exe	83

C:\Users\Admin\AppData\Local\Temp\Setup RX Pro Audio Editor v10.3.0.exe
"C:\Users\Admin\AppData\Local\Temp\Setup RX Pro Audio Editor v10.3.0.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5112
- C:\Users\Admin\AppData\Local\Temp\is-RHI1H.tmp\Setup RX Pro Audio Editor v10.3.0.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-RHI1H.tmp\Setup RX Pro Audio Editor v10.3.0.tmp" /SL5="$5004A,121344,0,C:\Users\Admin\AppData\Local\Temp\Setup RX Pro Audio Editor v10.3.0.exe"
  2⤵
  - Executes dropped EXE
  PID:2692

C:\Users\Admin\AppData\Local\Temp\is-RHI1H.tmp\Setup RX Pro Audio Editor v10.3.0.tmp

Filesize
1.1MB

MD5
34acc2bdb45a9c436181426828c4cb49

SHA1
5adaa1ac822e6128b8d4b59a54d19901880452ae

SHA256
9c81817acd4982632d8c7f1df3898fca1477577738184265d735f49fc5480f07

SHA512
134ff4022571efd46f7a62e99b857ebe834e9916c786345908010f9e1fb90be226b740ddee16ae9290fe45c86be7238c4555e422abe66a461d11545e19734beb

Download Submit
memory/2692-139-0x0000000002400000-0x0000000002401000-memory.dmp

Filesize
4KB

Download
memory/2692-141-0x0000000000400000-0x000000000052E000-memory.dmp

Filesize
1.2MB

Download
memory/2692-142-0x0000000002400000-0x0000000002401000-memory.dmp

Filesize
4KB

Download
memory/5112-133-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/5112-140-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download