86178361dcef92d297d95c64327636c896769e65edac8e3d066c0607d2ceedba

Analysis

max time kernel
141s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
16/10/2023, 17:21

Target

NEAS.248042c247d481b65f0a8cfc4cc046c0_JC.exe
Size

5KB
MD5

248042c247d481b65f0a8cfc4cc046c0
SHA1

4b794f3d612bc12b0ee284229be3338db5321058
SHA256

86178361dcef92d297d95c64327636c896769e65edac8e3d066c0607d2ceedba
SHA512

c831f7630eeaaaa469e136d4e49c0ce3286a4f0de8fcf07eb3563c9dcef612b1a97f1d931c4042d6d1866f6407ca953874c1a99f8a883a618230d74d89b77bba
SSDEEP

48:63rtHZWXhpjGwS+Y/M/ukzuufIvFONHTrg7JGdid+9orw2r6:+tHIXhFGOY/wVwtOlTrYyorC

Score

1^/10

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 1588 wrote to memory of 3040	1588	NEAS.248042c247d481b65f0a8cfc4cc046c0_JC.exe	84
PID 1588 wrote to memory of 3040	1588	NEAS.248042c247d481b65f0a8cfc4cc046c0_JC.exe	84

C:\Users\Admin\AppData\Local\Temp\NEAS.248042c247d481b65f0a8cfc4cc046c0_JC.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.248042c247d481b65f0a8cfc4cc046c0_JC.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1588
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\20231016T172216_776.exe
  2⤵
  PID:3040