8c0e25e62b7d3bc13840529c20871f94785c92b81cb01067d2405205139fc944

Analysis

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
15/11/2023, 11:25

Target

Sourceforge_2724.exe
Size

20KB
MD5

46be6886dc4e5e0d5d45711fd783c95a
SHA1

589d68f8547946c3903a563431ea7e7569efce34
SHA256

8c0e25e62b7d3bc13840529c20871f94785c92b81cb01067d2405205139fc944
SHA512

25e78f63e6ff0dcba137726e860c19f51cf66d8371d53ee268957fef92055f8df77ba868a404d8ebe2ce583d00161abcaf1dd7ec6d1e2f9a44cbf4e5603c873e
SSDEEP

96:kKqyQFJpGw/VMYcCuQlwySBeiU8hEvaSlK1Vlcixzpk2XKzNt:GxlpdruQlwnEiUpva6kSixljc

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2032	dw20.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1772 wrote to memory of 2032	1772	Sourceforge_2724.exe	29
PID 1772 wrote to memory of 2032	1772	Sourceforge_2724.exe	29
PID 1772 wrote to memory of 2032	1772	Sourceforge_2724.exe	29
PID 1772 wrote to memory of 2032	1772	Sourceforge_2724.exe	29

C:\Users\Admin\AppData\Local\Temp\Sourceforge_2724.exe
"C:\Users\Admin\AppData\Local\Temp\Sourceforge_2724.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1772
- C:\Windows\Microsoft.NET\Framework\v2.0.50727\dw20.exe
  dw20.exe -x -s 404
  2⤵
  - Suspicious behavior: GetForegroundWindowSpam
  PID:2032

memory/1772-0-0x0000000074180000-0x000000007472B000-memory.dmp

Filesize
5.7MB

Download
memory/1772-2-0x00000000008E0000-0x0000000000920000-memory.dmp

Filesize
256KB

Download
memory/1772-1-0x0000000074180000-0x000000007472B000-memory.dmp

Filesize
5.7MB

Download
memory/1772-4-0x0000000074180000-0x000000007472B000-memory.dmp

Filesize
5.7MB

Download
memory/1772-5-0x00000000008E0000-0x0000000000920000-memory.dmp

Filesize
256KB

Download
memory/2032-3-0x00000000004F0000-0x00000000004F1000-memory.dmp

Filesize
4KB

Download
memory/2032-6-0x00000000004F0000-0x00000000004F1000-memory.dmp

Filesize
4KB

Download