666065e94aeb44b943f12406994e68a6c1f2416e3205fa8a124d6cf27951c5f1

Analysis

max time kernel
143s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
07/10/2023, 01:56

Target

666065e94aeb44b943f12406994e68a6c1f2416e3205fa8a124d6cf27951c5f1.exe
Size

220KB
MD5

d1fa1c24e3c3b2291b78a70ac6389502
SHA1

24e80cc42a9a6b4cd512f9ec9e3c6f24a4579f4d
SHA256

666065e94aeb44b943f12406994e68a6c1f2416e3205fa8a124d6cf27951c5f1
SHA512

a188124c680c29e853edca3c28f4bab12529c2fbfd02b76d98492111daf7bd4d0d503919b1a08ff2d6476ba339eec40d7393ec80051ffcd74435b75299839c09
SSDEEP

3072:2ACo2nbTHlq4+Gs6Oo7KCeOlxeCGMQXZA6Pn/PlKuxwbjkfVx/hzqVVQQBed2fA/:ddmH9+Gs6OLyxeXZAo1Vkw/fD+fdxIZ

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3416 wrote to memory of 4468	3416	666065e94aeb44b943f12406994e68a6c1f2416e3205fa8a124d6cf27951c5f1.exe	87
PID 3416 wrote to memory of 4468	3416	666065e94aeb44b943f12406994e68a6c1f2416e3205fa8a124d6cf27951c5f1.exe	87
PID 3416 wrote to memory of 4468	3416	666065e94aeb44b943f12406994e68a6c1f2416e3205fa8a124d6cf27951c5f1.exe	87

C:\Users\Admin\AppData\Local\Temp\666065e94aeb44b943f12406994e68a6c1f2416e3205fa8a124d6cf27951c5f1.exe
"C:\Users\Admin\AppData\Local\Temp\666065e94aeb44b943f12406994e68a6c1f2416e3205fa8a124d6cf27951c5f1.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3416
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c cls
  2⤵
  PID:4468