2100bfbd7ff462afb765aae27acb0e3eaa663cae81b9c189cfd36970f4b10fe0

Analysis

max time kernel
140s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
14/10/2023, 08:20

Target

NEAS.e7054e946b14f791eea0101bdeddce30.exe
Size

5KB
MD5

e7054e946b14f791eea0101bdeddce30
SHA1

d5a3ee037b41acea47f39e1f44ca8615356166ff
SHA256

2100bfbd7ff462afb765aae27acb0e3eaa663cae81b9c189cfd36970f4b10fe0
SHA512

a82f0473e969f1acfb0b9a4a4954f6f63518ac70efb2848db471e21631f48eddd7db8ebeb03cfdf2a78cfaf2010a6b6f13a6175316d85a7f3202ee4fe017984f
SSDEEP

48:6W8StHJWXxZ6V2u9QZBzuOHwm4aNBTrg7SY0jKIydKIyc9orwCB3:lxtHYXxUR9QnLQm4a3TrlhKIWKI5orX

Score

1^/10

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 2456 wrote to memory of 4568	2456	NEAS.e7054e946b14f791eea0101bdeddce30.exe	88
PID 2456 wrote to memory of 4568	2456	NEAS.e7054e946b14f791eea0101bdeddce30.exe	88

C:\Users\Admin\AppData\Local\Temp\NEAS.e7054e946b14f791eea0101bdeddce30.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.e7054e946b14f791eea0101bdeddce30.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2456
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\20231014T204145_909.exe
  2⤵
  PID:4568