5b915d19bd0c1f48662d5e0803ef4c62ebf228cf4c3bda2d14baea2eb2d302e9

Analysis

max time kernel
146s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
24/12/2023, 23:15

Target

18b9d55d0669a55e0ca200a70666458b.exe
Size

1.2MB
MD5

18b9d55d0669a55e0ca200a70666458b
SHA1

1f10e348afe8b9f918419ce61cfed74e86dc9ad6
SHA256

5b915d19bd0c1f48662d5e0803ef4c62ebf228cf4c3bda2d14baea2eb2d302e9
SHA512

1f43daf32d3e32646a5b81dc9ad9424ee3e75246e9c02744633cad6ae6a91fbb775fcee2625eca5050e7b5d3758be4653cdf9b98e13e2a6dcd2dc2e81b3c2cd5
SSDEEP

24576:q3yoSlTpSBzeK8fK6+ztuAmJ2HvMQ9WesRnNydyZ/D9kqtZaTO:FF0CKlMcMQ5IbHZ6O

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2344	18b9d55d0669a55e0ca200a70666458b.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3008 wrote to memory of 2344	3008	18b9d55d0669a55e0ca200a70666458b.exe	91
PID 3008 wrote to memory of 2344	3008	18b9d55d0669a55e0ca200a70666458b.exe	91
PID 3008 wrote to memory of 2344	3008	18b9d55d0669a55e0ca200a70666458b.exe	91

C:\Users\Admin\AppData\Local\Temp\18b9d55d0669a55e0ca200a70666458b.exe
"C:\Users\Admin\AppData\Local\Temp\18b9d55d0669a55e0ca200a70666458b.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3008
- C:\Users\Admin\AppData\Local\Temp\is-LB7IA.tmp\18b9d55d0669a55e0ca200a70666458b.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-LB7IA.tmp\18b9d55d0669a55e0ca200a70666458b.tmp" /SL5="$C0064,792541,114176,C:\Users\Admin\AppData\Local\Temp\18b9d55d0669a55e0ca200a70666458b.exe"
  2⤵
  - Executes dropped EXE
  PID:2344

C:\Users\Admin\AppData\Local\Temp\is-LB7IA.tmp\18b9d55d0669a55e0ca200a70666458b.tmp

Filesize
1.1MB

MD5
f120c361b527a9d090782300aa8f1ce5

SHA1
ed82441da0dc7a5695ef96839fc2aea0f0c7e376

SHA256
9209a83ac4b0127081327b6e03960e2a4325dbb31f0bba2b56dfb785583f9825

SHA512
60fc418c4296f67b923e1fff4e6034ed41eeba61604b14d560cfd84e7476b59311c6029aee7ee602d8fdc635107855e5c05dcf6a0137c6ba89db7134e63e5555

Download Submit
memory/2344-6-0x0000000000840000-0x0000000000841000-memory.dmp

Filesize
4KB

Download
memory/2344-15-0x0000000000400000-0x0000000000529000-memory.dmp

Filesize
1.2MB

Download
memory/2344-18-0x0000000000840000-0x0000000000841000-memory.dmp

Filesize
4KB

Download
memory/3008-0-0x0000000000400000-0x0000000000425000-memory.dmp

Filesize
148KB

Download
memory/3008-14-0x0000000000400000-0x0000000000425000-memory.dmp

Filesize
148KB

Download