d5c1974cd299e95b4918cbd4d8291c987193503e7077f1603f172266526279e6

Analysis

max time kernel
142s
max time network
109s
platform
windows10-2004_x64
resource
win10v2004-20230621-en
resource tags

arch:x64arch:x86image:win10v2004-20230621-enlocale:en-usos:windows10-2004-x64system
submitted
30/06/2023, 14:54

Target

SONY VEGAS PRO 14/PARCHE.exe
Size

13.6MB
MD5

3d6def6f1c49ac28995862ce72d44ec6
SHA1

530f387d2539020fe794544a0b76f41fd67091f9
SHA256

c22df08df65fdd354ac969dc91d3d3ef4a8157ebd2c8720c52bbc1fac2e54510
SHA512

62b2d98c8f29b00c76c975fa7e219b82976ffa16390da8b7055c6c052274b0eba1a20963ee26dc8325965ed64fdd0c0fbb2202987a91fbf2cf7e427786c34d5c
SSDEEP

393216:xsUR2F9uK+H052X4oc8OOoBmecNr2ZRG0G6Oxcxt5N:rvH5IZ85YZ/Gf2/D

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
1616	PARCHE.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3400 wrote to memory of 1616	3400	PARCHE.exe	84
PID 3400 wrote to memory of 1616	3400	PARCHE.exe	84
PID 3400 wrote to memory of 1616	3400	PARCHE.exe	84

C:\Users\Admin\AppData\Local\Temp\SONY VEGAS PRO 14\PARCHE.exe
"C:\Users\Admin\AppData\Local\Temp\SONY VEGAS PRO 14\PARCHE.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3400
- C:\Users\Admin\AppData\Local\Temp\is-GIE67.tmp\PARCHE.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-GIE67.tmp\PARCHE.tmp" /SL5="$A0048,13790952,477184,C:\Users\Admin\AppData\Local\Temp\SONY VEGAS PRO 14\PARCHE.exe"
  2⤵
  - Executes dropped EXE
  PID:1616

C:\Users\Admin\AppData\Local\Temp\is-GIE67.tmp\PARCHE.tmp

Filesize
1.5MB

MD5
4e36eefd8af8607ffa74c543bca21fdb

SHA1
05058307797aac1e1ed52507d23dc0e172bf31b2

SHA256
ac6a2fd94cf9a132ecc0253ca1e223c324bea9d7eea892cf60191fa4e8b6dc92

SHA512
fb64d132c8c4fe5439caa2b0209719898d39adf21bfd2b45a0931769068ccfae44e1d88175235502243dd285702dfe17da7d27f2287d050bb8045ac6647b9b71

Download Submit
memory/1616-139-0x0000000002560000-0x0000000002561000-memory.dmp

Filesize
4KB

Download
memory/1616-141-0x0000000000400000-0x0000000000584000-memory.dmp

Filesize
1.5MB

Download
memory/3400-133-0x0000000000400000-0x000000000047E000-memory.dmp

Filesize
504KB

Download
memory/3400-140-0x0000000000400000-0x000000000047E000-memory.dmp

Filesize
504KB

Download