b88bee1afe7b8d9a9eb11c6293e552e0c4e91eef2bc3fe8984d65216f566a59c

Analysis

max time kernel
132s
max time network
162s
platform
windows10-2004_x64
resource
win10v2004-20231020-en
resource tags

arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
submitted
25-10-2023 16:27

Target

Request for Quotation -E23101031.exe
Size

421KB
MD5

e2de701be7d14bfd5b55b58a992313d5
SHA1

ccd64813a765cc3a6604c5981d6921461bbe8386
SHA256

b88bee1afe7b8d9a9eb11c6293e552e0c4e91eef2bc3fe8984d65216f566a59c
SHA512

0613bf19c4c8af13e2c0c08020f64c62f89eb000ed4eec3040dd58b24ad2cdef942e36ec3b602835120350b2c3c79d02178bdd38dfd22f555ed90c563e4ec2f0
SSDEEP

12288:4uYF8hfn63OTIZEp2FjiOnKHMQhqL35bgaG:4uXfn6BBFjiOnKHMQhqLLG

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

Request for Quotation -E23101031.exe

description	pid	process	target process
PID 4904 wrote to memory of 3264	4904	Request for Quotation -E23101031.exe	RegAsm.exe
PID 4904 wrote to memory of 3264	4904	Request for Quotation -E23101031.exe	RegAsm.exe
PID 4904 wrote to memory of 3264	4904	Request for Quotation -E23101031.exe	RegAsm.exe

C:\Users\Admin\AppData\Local\Temp\Request for Quotation -E23101031.exe
"C:\Users\Admin\AppData\Local\Temp\Request for Quotation -E23101031.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4904

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
2⤵
PID:3264

memory/4904-0-0x0000000000EE0000-0x0000000000F50000-memory.dmp

Filesize
448KB

Download
memory/4904-1-0x00000000749A0000-0x0000000075150000-memory.dmp

Filesize
7.7MB

Download
memory/4904-2-0x0000000005DE0000-0x0000000006384000-memory.dmp

Filesize
5.6MB

Download
memory/4904-3-0x0000000005930000-0x00000000059C2000-memory.dmp

Filesize
584KB

Download
memory/4904-4-0x00000000059D0000-0x0000000005A24000-memory.dmp

Filesize
336KB

Download
memory/4904-5-0x00000000749A0000-0x0000000075150000-memory.dmp

Filesize
7.7MB

Download
memory/4904-6-0x0000000005B50000-0x0000000005B60000-memory.dmp

Filesize
64KB

Download
memory/4904-7-0x0000000006430000-0x00000000064CC000-memory.dmp

Filesize
624KB

Download
memory/4904-8-0x0000000005AE0000-0x0000000005AEA000-memory.dmp

Filesize
40KB

Download
memory/4904-10-0x00000000749A0000-0x0000000075150000-memory.dmp

Filesize
7.7MB

Download