5b5edfe8dc10b03f7d909ba53d63f0f32bdf10d7a56572a889142df984b7d606

Analysis

max time kernel
121s
max time network
132s
platform
windows7_x64
resource
win7-20231023-en
resource tags

arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
submitted
15/11/2023, 11:26

Target

Sourceforge_3685.exe
Size

16KB
MD5

a497e7a4d8404a5a998c3afd12771504
SHA1

59c8b98b9d285ccf079454a7e4286081a21cd33f
SHA256

5b5edfe8dc10b03f7d909ba53d63f0f32bdf10d7a56572a889142df984b7d606
SHA512

448b5b26ce61b3b31d33a29ad26f84a2df60b14190c83fd109fd6c0fd9ff1ad8cbb0840e02c609a53ba8ee9e050de2704857c357bb23d9080ec14243b13707b8
SSDEEP

48:6c4DpIcZh+ywOe2AIi9lsJemYXL1sIWvhSQNLJabi3ubNiCcSFi/IsdGtJvzWJyO:GdZMyAI+IIitabLbUG2Isd+z4IM

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2732	dw20.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2124 wrote to memory of 2732	2124	Sourceforge_3685.exe	29
PID 2124 wrote to memory of 2732	2124	Sourceforge_3685.exe	29
PID 2124 wrote to memory of 2732	2124	Sourceforge_3685.exe	29
PID 2124 wrote to memory of 2732	2124	Sourceforge_3685.exe	29

C:\Users\Admin\AppData\Local\Temp\Sourceforge_3685.exe
"C:\Users\Admin\AppData\Local\Temp\Sourceforge_3685.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2124
- C:\Windows\Microsoft.NET\Framework\v2.0.50727\dw20.exe
  dw20.exe -x -s 424
  2⤵
  - Suspicious behavior: GetForegroundWindowSpam
  PID:2732

memory/2124-0-0x00000000749E0000-0x0000000074F8B000-memory.dmp

Filesize
5.7MB

Download
memory/2124-1-0x00000000749E0000-0x0000000074F8B000-memory.dmp

Filesize
5.7MB

Download
memory/2124-2-0x00000000002F0000-0x0000000000330000-memory.dmp

Filesize
256KB

Download
memory/2124-4-0x00000000749E0000-0x0000000074F8B000-memory.dmp

Filesize
5.7MB

Download
memory/2124-5-0x00000000002F0000-0x0000000000330000-memory.dmp

Filesize
256KB

Download
memory/2732-3-0x0000000002A10000-0x0000000002A11000-memory.dmp

Filesize
4KB

Download
memory/2732-6-0x0000000002A10000-0x0000000002A11000-memory.dmp

Filesize
4KB

Download