9329231106a8e61f637ed1a70b63c43429870912bbbba155dbb4b839b05c464a

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
01-08-2023 05:14

Target

DAO-Servicecontrol.exe
Size

12KB
MD5

9b54d43b6b95f60ba7f7c5439ece7d01
SHA1

07f5a1127759b47ef85d04c184b00371f2b954e7
SHA256

1d5d1c80cf72350edac948e9142ab9c95f33bbe8278367ca5b17529faad7b4d9
SHA512

b74206883aa1264d9842d833adeb935b32d31d9fcd877bd740d7b7f953739fa83b39cdcafc130625f29cad40ee98b4ede56932fba768113636aba8040be53a8b
SSDEEP

192:qALXVqT9WoupxZVGnlYJLLtIDLTypcuBr4ExWCS+RszYcCeW:qALlG9RupbZ1+LTymAbxWCS+CzYcCeW

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1568	dw20.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2292 wrote to memory of 1568	2292	DAO-Servicecontrol.exe	29
PID 2292 wrote to memory of 1568	2292	DAO-Servicecontrol.exe	29
PID 2292 wrote to memory of 1568	2292	DAO-Servicecontrol.exe	29
PID 2292 wrote to memory of 1568	2292	DAO-Servicecontrol.exe	29

C:\Users\Admin\AppData\Local\Temp\DAO-Servicecontrol.exe
"C:\Users\Admin\AppData\Local\Temp\DAO-Servicecontrol.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2292
- C:\Windows\Microsoft.NET\Framework\v2.0.50727\dw20.exe
  dw20.exe -x -s 472
  2⤵
  - Suspicious behavior: GetForegroundWindowSpam
  PID:1568

memory/1568-57-0x0000000000550000-0x0000000000551000-memory.dmp

Filesize
4KB

Download
memory/1568-60-0x0000000000550000-0x0000000000551000-memory.dmp

Filesize
4KB

Download
memory/2292-54-0x0000000074BA0000-0x000000007514B000-memory.dmp

Filesize
5.7MB

Download
memory/2292-55-0x0000000074BA0000-0x000000007514B000-memory.dmp

Filesize
5.7MB

Download
memory/2292-56-0x00000000020D0000-0x0000000002110000-memory.dmp

Filesize
256KB

Download
memory/2292-58-0x0000000074BA0000-0x000000007514B000-memory.dmp

Filesize
5.7MB

Download
memory/2292-59-0x00000000020D0000-0x0000000002110000-memory.dmp

Filesize
256KB

Download