77206304b64e1d2f6b0f1dede51784cb8fc6b2dad113676fe065de07a89b8084

Analysis

max time kernel
117s
max time network
120s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
23-10-2023 10:37

Target

PO_202310.pif.exe
Size

432KB
MD5

652fc277b44f8481ea0fd8d4a661a1e5
SHA1

4c2e669b51228ab92a0bcbd55979a234e567da67
SHA256

77206304b64e1d2f6b0f1dede51784cb8fc6b2dad113676fe065de07a89b8084
SHA512

ba99a2fedff0308b6eb4c087cb67b17b62059ff29e2b511995eb1fec2a826b2433f1105a0d115daac278a91097b90303e2e1cdb3469b477f5b1e2b730b8f9ae4
SSDEEP

12288:yD7gUiV2OazGypq9Q/NGbEPGLf6JYrOiqo+ip1:n2OazTNYEW6cmip

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

Processes:

PO_202310.pif.exe

description	pid	process	target process
PID 1564 wrote to memory of 2220	1564	PO_202310.pif.exe	RegAsm.exe
PID 1564 wrote to memory of 2220	1564	PO_202310.pif.exe	RegAsm.exe
PID 1564 wrote to memory of 2220	1564	PO_202310.pif.exe	RegAsm.exe
PID 1564 wrote to memory of 2220	1564	PO_202310.pif.exe	RegAsm.exe
PID 1564 wrote to memory of 2220	1564	PO_202310.pif.exe	RegAsm.exe
PID 1564 wrote to memory of 2220	1564	PO_202310.pif.exe	RegAsm.exe
PID 1564 wrote to memory of 2220	1564	PO_202310.pif.exe	RegAsm.exe

C:\Users\Admin\AppData\Local\Temp\PO_202310.pif.exe
"C:\Users\Admin\AppData\Local\Temp\PO_202310.pif.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1564

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
2⤵
PID:2220

memory/1564-0-0x0000000000B20000-0x0000000000B92000-memory.dmp

Filesize
456KB

Download
memory/1564-1-0x0000000074C10000-0x00000000752FE000-memory.dmp

Filesize
6.9MB

Download
memory/1564-2-0x0000000005370000-0x00000000053C4000-memory.dmp

Filesize
336KB

Download
memory/1564-3-0x0000000000AD0000-0x0000000000B10000-memory.dmp

Filesize
256KB

Download
memory/1564-4-0x0000000000B10000-0x0000000000B1A000-memory.dmp

Filesize
40KB

Download
memory/1564-5-0x0000000074C10000-0x00000000752FE000-memory.dmp

Filesize
6.9MB

Download