22dbdf754f1582f94534cbe5fa7eb6475c73fe95d7e1451ad4a4d5964f1c2eae

Analysis

max time kernel
87s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
24/12/2023, 22:12

Target

14cf43710305d23ff100a0020ddb076f.exe
Size

80KB
MD5

14cf43710305d23ff100a0020ddb076f
SHA1

3f446f5c10cfb05c50d9cf6c837505543f5d6e9f
SHA256

22dbdf754f1582f94534cbe5fa7eb6475c73fe95d7e1451ad4a4d5964f1c2eae
SHA512

2a688171998d339fa1b522f74467415ca5ec916803697f231526cb7e74e4f028ac36bf772eac61f8d81f0b7075a7f82cf0a9b2a7a9658c6612186a82d0853834
SSDEEP

1536:xZ3KLbNyA74z9D/dx7GhT7/RPDXjiHc9xRMbkOTTxYqyqXxf/rzlF:2LbNy+4z9D/dx74TzNDD9xRMIChfl

Score

1^/10

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
3864	14cf43710305d23ff100a0020ddb076f.exe

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 3864 wrote to memory of 4320	3864	14cf43710305d23ff100a0020ddb076f.exe	87
PID 3864 wrote to memory of 4320	3864	14cf43710305d23ff100a0020ddb076f.exe	87
PID 3864 wrote to memory of 4320	3864	14cf43710305d23ff100a0020ddb076f.exe	87
PID 3864 wrote to memory of 4320	3864	14cf43710305d23ff100a0020ddb076f.exe	87
PID 3864 wrote to memory of 4320	3864	14cf43710305d23ff100a0020ddb076f.exe	87

memory/3864-0-0x0000000000400000-0x0000000000429000-memory.dmp

Filesize
164KB

Download
memory/3864-1-0x00000000005D0000-0x00000000005D2000-memory.dmp

Filesize
8KB

Download
memory/3864-2-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/3864-4-0x0000000000420000-0x000000000042E000-memory.dmp

Filesize
56KB

Download