1b14242fe34c166e7842a1c108c69fcce2d31484cc93ed803f1b28b46a0baeea

Analysis

max time kernel
134s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20231020-en
resource tags

arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
submitted
10-11-2023 03:30

Target

1b14242fe34c166e7842a1c108c69fcce2d31484cc93ed803f1b28b46a0baeea.exe
Size

367KB
MD5

e9d5ee7c8be48ac6eebf50e1f7f5f861
SHA1

b217a9d47c3a62fe3ac52a149abb4e302e664bae
SHA256

1b14242fe34c166e7842a1c108c69fcce2d31484cc93ed803f1b28b46a0baeea
SHA512

2048ccf72dbe507c5f1b88d3edb3c64b27a05a40f67eb28a0bec16f2aaa5f62602303cd8c1e77f195ffc54806a65e0d118722418cd98747c365a7077bc5be0bd
SSDEEP

6144:yAY8QgjLaR06ziRI5HiZB/rPf+ywWlTJYJzp4Xkj8jKOexbYl41mOds8wJdbrrhh:BaR06ziRI5HgdrX5nlTJoz2XkMKOexbc

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

1b14242fe34c166e7842a1c108c69fcce2d31484cc93ed803f1b28b46a0baeea.exe

description	pid	process	target process
PID 4636 wrote to memory of 832	4636	1b14242fe34c166e7842a1c108c69fcce2d31484cc93ed803f1b28b46a0baeea.exe	RegAsm.exe
PID 4636 wrote to memory of 832	4636	1b14242fe34c166e7842a1c108c69fcce2d31484cc93ed803f1b28b46a0baeea.exe	RegAsm.exe
PID 4636 wrote to memory of 832	4636	1b14242fe34c166e7842a1c108c69fcce2d31484cc93ed803f1b28b46a0baeea.exe	RegAsm.exe

C:\Users\Admin\AppData\Local\Temp\1b14242fe34c166e7842a1c108c69fcce2d31484cc93ed803f1b28b46a0baeea.exe
"C:\Users\Admin\AppData\Local\Temp\1b14242fe34c166e7842a1c108c69fcce2d31484cc93ed803f1b28b46a0baeea.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4636

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
2⤵
PID:832

memory/4636-0-0x0000000074FE0000-0x0000000075790000-memory.dmp

Filesize
7.7MB

Download
memory/4636-1-0x00000000009D0000-0x0000000000A32000-memory.dmp

Filesize
392KB

Download
memory/4636-2-0x0000000005A40000-0x0000000005FE4000-memory.dmp

Filesize
5.6MB

Download
memory/4636-3-0x0000000005490000-0x0000000005522000-memory.dmp

Filesize
584KB

Download
memory/4636-4-0x0000000005430000-0x0000000005484000-memory.dmp

Filesize
336KB

Download
memory/4636-5-0x0000000074FE0000-0x0000000075790000-memory.dmp

Filesize
7.7MB

Download
memory/4636-6-0x0000000002F60000-0x0000000002F70000-memory.dmp

Filesize
64KB

Download
memory/4636-7-0x0000000005880000-0x000000000591C000-memory.dmp

Filesize
624KB

Download
memory/4636-8-0x00000000057E0000-0x00000000057EA000-memory.dmp

Filesize
40KB

Download
memory/4636-10-0x0000000074FE0000-0x0000000075790000-memory.dmp

Filesize
7.7MB

Download