0ff965e6f45e08c7ec843a01d22a6393b5a0be7b30029b7fc70a23d1e1aae6ed

Analysis

max time kernel
123s
max time network
126s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
23-10-2023 03:35

Target

New product.scr
Size

437KB
MD5

3e872d74cb692deb202d25859986357d
SHA1

9ba324ec9ff4f454409f653da5d4d7b694255d6b
SHA256

701d2231e9b9297450abddc537bfdb90fbb45f679b6da2e1e45b615280bd95c6
SHA512

90b800106b029cd671216a0566a573975a6ed3bcfd45c255f47b4e8f9766674f01e3548b5f0abce53258ec89885f8bcd04bc9c85a97596152cadcc2b361e86dd
SSDEEP

12288:AD7gUiVaOazGypq9Q/NGbEPAj6JYrOiqot2:daOazTNYE4j6c

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

Processes:

New product.scr

description	pid	process	target process
PID 2136 wrote to memory of 2272	2136	New product.scr	RegAsm.exe
PID 2136 wrote to memory of 2272	2136	New product.scr	RegAsm.exe
PID 2136 wrote to memory of 2272	2136	New product.scr	RegAsm.exe
PID 2136 wrote to memory of 2272	2136	New product.scr	RegAsm.exe
PID 2136 wrote to memory of 2272	2136	New product.scr	RegAsm.exe
PID 2136 wrote to memory of 2272	2136	New product.scr	RegAsm.exe
PID 2136 wrote to memory of 2272	2136	New product.scr	RegAsm.exe

C:\Users\Admin\AppData\Local\Temp\New product.scr
"C:\Users\Admin\AppData\Local\Temp\New product.scr" /S
1⤵
- Suspicious use of WriteProcessMemory
PID:2136

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
2⤵
PID:2272

memory/2136-0-0x0000000001250000-0x00000000012C2000-memory.dmp

Filesize
456KB

Download
memory/2136-1-0x0000000073CE0000-0x00000000743CE000-memory.dmp

Filesize
6.9MB

Download
memory/2136-2-0x0000000005380000-0x00000000053D4000-memory.dmp

Filesize
336KB

Download
memory/2136-3-0x0000000000570000-0x00000000005B0000-memory.dmp

Filesize
256KB

Download
memory/2136-4-0x0000000000D70000-0x0000000000D7A000-memory.dmp

Filesize
40KB

Download
memory/2136-5-0x0000000073CE0000-0x00000000743CE000-memory.dmp

Filesize
6.9MB

Download