4806c46edc92c9e382735508aa3c9e237fc86f9cca60e0f91d8e143faa554d88

Analysis

max time kernel
212s
max time network
237s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
14/10/2023, 18:00

Target

NEAS.7aa68488296b03693efcd5182e120e10.exe
Size

5KB
MD5

7aa68488296b03693efcd5182e120e10
SHA1

babd6d586a0c77c28d815f6f13b20b4ff3258b58
SHA256

4806c46edc92c9e382735508aa3c9e237fc86f9cca60e0f91d8e143faa554d88
SHA512

82fbfe158cf69d907327010432104128dd9af6a07e9f9540165176b42ba72c29987c97e6614e7b45f09a3e9efa8f8d8f993ca846448bc6880cab6bc3e60d85b3
SSDEEP

48:6Bs2tHIWXgGvol74VvLt0Z5DwzuVBwjcDONI99oTrg7orARW1RW99orwS:6RtHdXgT4VvLtFkuuOS99oTr1r4eWor

Score

1^/10

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 1056 wrote to memory of 4724	1056	NEAS.7aa68488296b03693efcd5182e120e10.exe	87
PID 1056 wrote to memory of 4724	1056	NEAS.7aa68488296b03693efcd5182e120e10.exe	87

C:\Users\Admin\AppData\Local\Temp\NEAS.7aa68488296b03693efcd5182e120e10.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.7aa68488296b03693efcd5182e120e10.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1056
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\20231015T044856_825.exe
  2⤵
  PID:4724