090432cdc5e1b747a8a5f937da34cae5979f5aedd55b0cf55455412a211a57b2

Analysis

max time kernel
151s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20231127-en
resource tags

arch:x64arch:x86image:win10v2004-20231127-enlocale:en-usos:windows10-2004-x64system
submitted
01-12-2023 02:30

Target

Setup_DriverDoc_2024.exe
Size

6.0MB
MD5

c65a354ac28f2f45c7ca8a38e4f778d6
SHA1

42d84f6be5cfa1503dc7bd8275073872d71a4fc0
SHA256

396cb9e17c57f09c4afab97f91e72011e3f115b15e764c39d26473d92fe2c45e
SHA512

7acba2651fb1378a97c47ce6723808235ddd74d2cb736f5fb6f28a241f3b33188e9a511c6be2eb3ca8e7cad68c05a76a0c853edc5a417a16aacd5c0388950017
SSDEEP

98304:KSi1jH0UJukUYMwioEgGU9KM+ZFNIO05p0oO2gz8+fyTx:MUvkUMiij9KM+7Npc0R4+KTx

Score

4^/10

Executes dropped EXE 1 IoCs

Processes:

Setup_DriverDoc_2024.tmp

pid process

4340 Setup_DriverDoc_2024.tmp

pid	process
4340	Setup_DriverDoc_2024.tmp

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

Setup_DriverDoc_2024.exe

description	pid	process	target process
PID 3828 wrote to memory of 4340	3828	Setup_DriverDoc_2024.exe	Setup_DriverDoc_2024.tmp
PID 3828 wrote to memory of 4340	3828	Setup_DriverDoc_2024.exe	Setup_DriverDoc_2024.tmp
PID 3828 wrote to memory of 4340	3828	Setup_DriverDoc_2024.exe	Setup_DriverDoc_2024.tmp

C:\Users\Admin\AppData\Local\Temp\Setup_DriverDoc_2024.exe
"C:\Users\Admin\AppData\Local\Temp\Setup_DriverDoc_2024.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3828

C:\Users\Admin\AppData\Local\Temp\is-TCN8M.tmp\Setup_DriverDoc_2024.tmp
"C:\Users\Admin\AppData\Local\Temp\is-TCN8M.tmp\Setup_DriverDoc_2024.tmp" /SL5="$50242,5347251,879104,C:\Users\Admin\AppData\Local\Temp\Setup_DriverDoc_2024.exe"
2⤵
- Executes dropped EXE
PID:4340

C:\Users\Admin\AppData\Local\Temp\is-TCN8M.tmp\Setup_DriverDoc_2024.tmp

Filesize
3.1MB

MD5
d70a98daf7a810ee18ce451ec673e399

SHA1
274dff37313f3fbdf82dfc4afd94582359b79fee

SHA256
9621346beee2a257b1966b6dc3f1f850d54ae0746bf1718d35c966649ac9b340

SHA512
a246aa8979a7bc1a8ae6d1c5ac637939e7ab3380484cb78a3fc98fe9ceccb51cb5d6dfe787ece6bb1420450741c0734a049849dac7242679b8660e71acf00e60

Download Submit
memory/3828-0-0x0000000000400000-0x00000000004E4000-memory.dmp

Filesize
912KB

Download
memory/3828-9-0x0000000000400000-0x00000000004E4000-memory.dmp

Filesize
912KB

Download
memory/4340-5-0x0000000002810000-0x0000000002811000-memory.dmp

Filesize
4KB

Download
memory/4340-10-0x0000000000400000-0x000000000071E000-memory.dmp

Filesize
3.1MB

Download
memory/4340-13-0x0000000002810000-0x0000000002811000-memory.dmp

Filesize
4KB

Download
memory/4340-19-0x0000000000400000-0x000000000071E000-memory.dmp

Filesize
3.1MB

Download