fbef8b47d8fa0b3951678531f06d88210de708cf5f99c428a6dacdff058f1449

Analysis

max time kernel
142s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
17/07/2023, 16:17

Target

965c5523f3d8ed_JC.exe
Size

428KB
MD5

965c5523f3d8ed5b9de89c7b8fcf7c9d
SHA1

1da65ced1c9a1e733043b552d3f46a7ad435bfe1
SHA256

fbef8b47d8fa0b3951678531f06d88210de708cf5f99c428a6dacdff058f1449
SHA512

55d582611201ad3f8600ff2ef13001ff98bef60236e20b96d3954a089791502bd7cc8baf8cc924351b01aa9425301751ae7a4beb54698e1f11b299cc4a20e55b
SSDEEP

12288:Z594+AcL4tBekiuKzEr/jB7TAdxj+3LbAOlLKPeAdFs5l:BL4tBekiuVr7R40gO0mAdw

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
1504	78F9.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4328 wrote to memory of 1504	4328	965c5523f3d8ed_JC.exe	85
PID 4328 wrote to memory of 1504	4328	965c5523f3d8ed_JC.exe	85
PID 4328 wrote to memory of 1504	4328	965c5523f3d8ed_JC.exe	85

C:\Users\Admin\AppData\Local\Temp\965c5523f3d8ed_JC.exe
"C:\Users\Admin\AppData\Local\Temp\965c5523f3d8ed_JC.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4328
- C:\Users\Admin\AppData\Local\Temp\78F9.tmp
  "C:\Users\Admin\AppData\Local\Temp\78F9.tmp" --helpC:\Users\Admin\AppData\Local\Temp\965c5523f3d8ed_JC.exe 1ACD46C8DC741579563668E4F6E7E872CB6328848475EB7888E67B03B8F50E1E27C1AF631737CA0CAA76ECC1C22C17862A018561DC81A3C1970892F85ACC490D
  2⤵
  - Executes dropped EXE
  PID:1504

C:\Users\Admin\AppData\Local\Temp\78F9.tmp

Filesize
428KB

MD5
6012f647e6b760f5e46e1aedfa02ca20

SHA1
ffecaabfe09c1b816626ca0920be4fcc83ea66d4

SHA256
701638294096ef4eeffd816c37f50f36b6d85ebef77bf24052e9ae9f08a3be2d

SHA512
1dc8e86da794cb632489f03a0b90e2832ce9af090afd4457697281045f63010d83c108e55843f72cc2be2f345069f8cc74ac2ce1be90b765b9d0c11e0c2b972b

Download Submit
C:\Users\Admin\AppData\Local\Temp\78F9.tmp

Filesize
428KB

MD5
6012f647e6b760f5e46e1aedfa02ca20

SHA1
ffecaabfe09c1b816626ca0920be4fcc83ea66d4

SHA256
701638294096ef4eeffd816c37f50f36b6d85ebef77bf24052e9ae9f08a3be2d

SHA512
1dc8e86da794cb632489f03a0b90e2832ce9af090afd4457697281045f63010d83c108e55843f72cc2be2f345069f8cc74ac2ce1be90b765b9d0c11e0c2b972b

Download Submit