0ff965e6f45e08c7ec843a01d22a6393b5a0be7b30029b7fc70a23d1e1aae6ed

Analysis

max time kernel
142s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20231020-en
resource tags

arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
submitted
23-10-2023 03:35

Target

PO_202310.exe
Size

432KB
MD5

652fc277b44f8481ea0fd8d4a661a1e5
SHA1

4c2e669b51228ab92a0bcbd55979a234e567da67
SHA256

77206304b64e1d2f6b0f1dede51784cb8fc6b2dad113676fe065de07a89b8084
SHA512

ba99a2fedff0308b6eb4c087cb67b17b62059ff29e2b511995eb1fec2a826b2433f1105a0d115daac278a91097b90303e2e1cdb3469b477f5b1e2b730b8f9ae4
SSDEEP

12288:yD7gUiV2OazGypq9Q/NGbEPGLf6JYrOiqo+ip1:n2OazTNYEW6cmip

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

PO_202310.exe

description	pid	process	target process
PID 2244 wrote to memory of 2560	2244	PO_202310.exe	RegAsm.exe
PID 2244 wrote to memory of 2560	2244	PO_202310.exe	RegAsm.exe
PID 2244 wrote to memory of 2560	2244	PO_202310.exe	RegAsm.exe

C:\Users\Admin\AppData\Local\Temp\PO_202310.exe
"C:\Users\Admin\AppData\Local\Temp\PO_202310.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2244

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
2⤵
PID:2560

memory/2244-1-0x00000000003A0000-0x0000000000412000-memory.dmp

Filesize
456KB

Download
memory/2244-0-0x0000000074D80000-0x0000000075530000-memory.dmp

Filesize
7.7MB

Download
memory/2244-2-0x0000000005430000-0x00000000059D4000-memory.dmp

Filesize
5.6MB

Download
memory/2244-3-0x0000000004E80000-0x0000000004F12000-memory.dmp

Filesize
584KB

Download
memory/2244-4-0x0000000004E10000-0x0000000004E20000-memory.dmp

Filesize
64KB

Download
memory/2244-5-0x0000000005EF0000-0x0000000005F44000-memory.dmp

Filesize
336KB

Download
memory/2244-6-0x0000000006000000-0x000000000609C000-memory.dmp

Filesize
624KB

Download
memory/2244-7-0x0000000005F60000-0x0000000005F6A000-memory.dmp

Filesize
40KB

Download
memory/2244-9-0x0000000074D80000-0x0000000075530000-memory.dmp

Filesize
7.7MB

Download