27d98e91c4e9fb55f9c4aa8efca637b23562e9c113afe939319cb74329cb8ffc

Resubmissions

27-11-2024 09:56

01-11-2023 13:57

max time kernel
167s
max time network
159s
platform
windows10-2004_x64
resource
win10v2004-20231020-en
resource tags

arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
submitted
01-11-2023 13:57

Target

project5-2.exe
Size

479KB
MD5

0481980472e71600fae80a864999e485
SHA1

3a296eb9fb50e2fc3a648bbcad459192b1be1bea
SHA256

27d98e91c4e9fb55f9c4aa8efca637b23562e9c113afe939319cb74329cb8ffc
SHA512

86bd6e844a57180d31643b961430fcb87758d3027a5560d511f4bd32ecb13e33a81edb9c1cead02b4e43aaf8ff0e5974cfe1e49acfd4c84b7a516a3852c8925b
SSDEEP

6144:pTNlPsSiE0grIlHAjNL7SXAtKZnbr8qz6xzS06d17GQxAAXcpGZ5wIzkyOD+lRXs:pFR0gsAjNL3tQbr8w6xely1JcXgDsLm

Score

1^/10

Suspicious behavior: EnumeratesProcesses 6 IoCs

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 2344 wrote to memory of 1032	2344	project5-2.exe	91
PID 2344 wrote to memory of 1032	2344	project5-2.exe	91
PID 2344 wrote to memory of 1032	2344	project5-2.exe	91
PID 2344 wrote to memory of 1032	2344	project5-2.exe	91
PID 2344 wrote to memory of 1032	2344	project5-2.exe	91

C:\Users\Admin\AppData\Local\Temp\project5-2.exe
"C:\Users\Admin\AppData\Local\Temp\project5-2.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2344
- C:\Windows\SysWOW64\dialer.exe
  "C:\Windows\system32\dialer.exe"
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1032

memory/1032-8-0x0000000000600000-0x0000000000609000-memory.dmp

Filesize
36KB

Download
memory/1032-17-0x0000000002130000-0x0000000002530000-memory.dmp

Filesize
4.0MB

Download
memory/1032-16-0x00000000758C0000-0x0000000075AD5000-memory.dmp

Filesize
2.1MB

Download
memory/1032-13-0x00007FFAA8BF0000-0x00007FFAA8DE5000-memory.dmp

Filesize
2.0MB

Download
memory/1032-14-0x0000000002130000-0x0000000002530000-memory.dmp

Filesize
4.0MB

Download
memory/1032-12-0x0000000002130000-0x0000000002530000-memory.dmp

Filesize
4.0MB

Download
memory/1032-11-0x0000000002130000-0x0000000002530000-memory.dmp

Filesize
4.0MB

Download
memory/2344-3-0x0000000003450000-0x0000000003850000-memory.dmp

Filesize
4.0MB

Download
memory/2344-9-0x0000000000400000-0x000000000048C000-memory.dmp

Filesize
560KB

Download
memory/2344-7-0x00000000758C0000-0x0000000075AD5000-memory.dmp

Filesize
2.1MB

Download
memory/2344-4-0x00007FFAA8BF0000-0x00007FFAA8DE5000-memory.dmp

Filesize
2.0MB

Download
memory/2344-5-0x0000000003450000-0x0000000003850000-memory.dmp

Filesize
4.0MB

Download
memory/2344-0-0x0000000000400000-0x000000000048C000-memory.dmp

Filesize
560KB

Download
memory/2344-2-0x0000000003450000-0x0000000003850000-memory.dmp

Filesize
4.0MB

Download
memory/2344-1-0x0000000003450000-0x0000000003850000-memory.dmp

Filesize
4.0MB

Download