6ee1e5991a0d9c2fe23d62b4d13a6279cf121eb49c0675a23050fa5bceee9d37

Analysis

max time kernel
118s
max time network
121s
platform
windows7_x64
resource
win7-20231023-en
resource tags

arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
submitted
30-10-2023 05:46

Target

SB0G28XC.bat.exe
Size

330KB
MD5

68ec81a206ccfd9346ab5f01ad9099ce
SHA1

28939cfbfbd6f4ad27a0107d8af960a66c0a1f89
SHA256

6ee1e5991a0d9c2fe23d62b4d13a6279cf121eb49c0675a23050fa5bceee9d37
SHA512

624fc52f7fdfb4c2b89cc8f21e405dbfcfcaf64223bb95f4f76eb2d18f9c23f0787603956c2ef1489b32510cd9ed045398987c5bead71fcc34dcb9097ca51827
SSDEEP

6144:5cOazRkHn3DeQLJhpSS4xfFYjtLYE2Odtyqd72frQQD:5cOazmqQLJ2n6JYrOiqo/

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

Processes:

SB0G28XC.bat.exe

description	pid	process	target process
PID 2004 wrote to memory of 3000	2004	SB0G28XC.bat.exe	RegAsm.exe
PID 2004 wrote to memory of 3000	2004	SB0G28XC.bat.exe	RegAsm.exe
PID 2004 wrote to memory of 3000	2004	SB0G28XC.bat.exe	RegAsm.exe
PID 2004 wrote to memory of 3000	2004	SB0G28XC.bat.exe	RegAsm.exe
PID 2004 wrote to memory of 3000	2004	SB0G28XC.bat.exe	RegAsm.exe
PID 2004 wrote to memory of 3000	2004	SB0G28XC.bat.exe	RegAsm.exe
PID 2004 wrote to memory of 3000	2004	SB0G28XC.bat.exe	RegAsm.exe

C:\Users\Admin\AppData\Local\Temp\SB0G28XC.bat.exe
"C:\Users\Admin\AppData\Local\Temp\SB0G28XC.bat.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2004

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
2⤵
PID:3000

memory/2004-1-0x0000000074AF0000-0x00000000751DE000-memory.dmp

Filesize
6.9MB

Download
memory/2004-0-0x0000000000EF0000-0x0000000000F48000-memory.dmp

Filesize
352KB

Download
memory/2004-2-0x0000000000B10000-0x0000000000B64000-memory.dmp

Filesize
336KB

Download
memory/2004-3-0x0000000004B50000-0x0000000004B90000-memory.dmp

Filesize
256KB

Download
memory/2004-4-0x0000000000260000-0x000000000026A000-memory.dmp

Filesize
40KB

Download
memory/2004-5-0x0000000074AF0000-0x00000000751DE000-memory.dmp

Filesize
6.9MB

Download