eeedd025574a643c65c85d5b256660c7d19b8874a0750c4eb8fe410b77073985

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
15-11-2023 11:25

Target

Sourceforge_2890.exe
Size

24KB
MD5

fb6b3f36df367010f3ec7f0ac08f681c
SHA1

1f69a8913333f1d861a7c15acd3382eabe50927e
SHA256

eeedd025574a643c65c85d5b256660c7d19b8874a0750c4eb8fe410b77073985
SHA512

ba954d77987f6dd34a6224151f271818cb8baa1f78d1c5ee7e06d3a8cff84bc829adda6489209cf5c10ded53122795df1c4bf729924abc92a0d540574ff0a3b1
SSDEEP

192:KF+vd4AqZ/7h6t9jadBYwQQ5abPOYqhx3/1x4ds4lNTjTeW3xF1:KF+lhqZ/7h+l2BOQ5abj8mC6lCW3xF

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2892	dw20.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2136 wrote to memory of 2892	2136	Sourceforge_2890.exe	29
PID 2136 wrote to memory of 2892	2136	Sourceforge_2890.exe	29
PID 2136 wrote to memory of 2892	2136	Sourceforge_2890.exe	29
PID 2136 wrote to memory of 2892	2136	Sourceforge_2890.exe	29

C:\Users\Admin\AppData\Local\Temp\Sourceforge_2890.exe
"C:\Users\Admin\AppData\Local\Temp\Sourceforge_2890.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2136
- C:\Windows\Microsoft.NET\Framework\v2.0.50727\dw20.exe
  dw20.exe -x -s 408
  2⤵
  - Suspicious behavior: GetForegroundWindowSpam
  PID:2892

memory/2136-0-0x0000000073F10000-0x00000000744BB000-memory.dmp

Filesize
5.7MB

Download
memory/2136-1-0x00000000004D0000-0x0000000000510000-memory.dmp

Filesize
256KB

Download
memory/2136-2-0x0000000073F10000-0x00000000744BB000-memory.dmp

Filesize
5.7MB

Download
memory/2136-4-0x0000000073F10000-0x00000000744BB000-memory.dmp

Filesize
5.7MB

Download
memory/2136-5-0x00000000004D0000-0x0000000000510000-memory.dmp

Filesize
256KB

Download
memory/2892-3-0x0000000002710000-0x0000000002711000-memory.dmp

Filesize
4KB

Download
memory/2892-6-0x0000000002710000-0x0000000002711000-memory.dmp

Filesize
4KB

Download