cf3ce6eca367ec4eed189a4f5d0a8406f1a4feb8b9c1f7b08720f3893758a09e

Analysis

max time kernel
138s
max time network
168s
platform
windows10-2004_x64
resource
win10v2004-20231020-en
resource tags

arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
submitted
22-10-2023 17:03

Target

5304e329eb59cd3685412e48275824e7a235f28186493d08935c9db576d6c2a1.exe
Size

447KB
MD5

219d233c4c50db433d953f5f7fdffed5
SHA1

49079a1e8bbba9e82a4ae8e9aaf098ae5691a458
SHA256

5304e329eb59cd3685412e48275824e7a235f28186493d08935c9db576d6c2a1
SHA512

7664b48fe58471fdc36b8a610ccbe4cbddaab0407f892d523686f53ded89e8f864e29938e05121966c1e860b5f40e2193be3c87c8b76c8e74333d0c698e69b70
SSDEEP

12288:mJfD2S+nRXKQV+dHhZdZcZm2TPZHhBak6ceXu0mOFH2m:GbzgRXKm+dHhZdZcZmyEk6Lz

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

5304e329eb59cd3685412e48275824e7a235f28186493d08935c9db576d6c2a1.exe

description	pid	process	target process
PID 888 wrote to memory of 4512	888	5304e329eb59cd3685412e48275824e7a235f28186493d08935c9db576d6c2a1.exe	RegAsm.exe
PID 888 wrote to memory of 4512	888	5304e329eb59cd3685412e48275824e7a235f28186493d08935c9db576d6c2a1.exe	RegAsm.exe
PID 888 wrote to memory of 4512	888	5304e329eb59cd3685412e48275824e7a235f28186493d08935c9db576d6c2a1.exe	RegAsm.exe

C:\Users\Admin\AppData\Local\Temp\5304e329eb59cd3685412e48275824e7a235f28186493d08935c9db576d6c2a1.exe
"C:\Users\Admin\AppData\Local\Temp\5304e329eb59cd3685412e48275824e7a235f28186493d08935c9db576d6c2a1.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:888

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
2⤵
PID:4512

memory/888-0-0x0000000074B10000-0x00000000752C0000-memory.dmp

Filesize
7.7MB

Download
memory/888-1-0x0000000000250000-0x00000000002C6000-memory.dmp

Filesize
472KB

Download
memory/888-2-0x0000000004C90000-0x0000000004CE4000-memory.dmp

Filesize
336KB

Download
memory/888-3-0x0000000005290000-0x0000000005834000-memory.dmp

Filesize
5.6MB

Download
memory/888-4-0x0000000004DC0000-0x0000000004E52000-memory.dmp

Filesize
584KB

Download
memory/888-5-0x0000000074B10000-0x00000000752C0000-memory.dmp

Filesize
7.7MB

Download
memory/888-6-0x0000000004C80000-0x0000000004C90000-memory.dmp

Filesize
64KB

Download
memory/888-7-0x0000000004F00000-0x0000000004F9C000-memory.dmp

Filesize
624KB

Download
memory/888-8-0x0000000004D60000-0x0000000004D6A000-memory.dmp

Filesize
40KB

Download
memory/888-10-0x0000000074B10000-0x00000000752C0000-memory.dmp

Filesize
7.7MB

Download