12902fdd1c7117649915fed4983af4b208bec9aab3625f3fc5eca94c3b970b3c

Analysis

max time kernel
142s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
24-12-2023 23:45

Target

1a9231c9d336d97e5ca815b75b23314e.exe
Size

107KB
MD5

1a9231c9d336d97e5ca815b75b23314e
SHA1

1fc5077a3cf02ab11abd43b5dc7ee153bce80942
SHA256

12902fdd1c7117649915fed4983af4b208bec9aab3625f3fc5eca94c3b970b3c
SHA512

92747b4f3f6aa11a63c8db98ba50f5228d14a8d859ba7a63a0f5a1ff969c744aa02251fbe9fc4ebea14afee7c5d6c77a33bae38fdf7f0e2bf8fb6ec6e2c91d5d
SSDEEP

1536:dK/L+z92gHl7WaCPCYxLvF+bEuRewVay1BFd3BcfdZTRtIcCLC3y:wL+z92gHl7WOKoguUwLBFd3Sfd4B

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3080 wrote to memory of 4820	3080	1a9231c9d336d97e5ca815b75b23314e.exe	90
PID 3080 wrote to memory of 4820	3080	1a9231c9d336d97e5ca815b75b23314e.exe	90
PID 3080 wrote to memory of 4820	3080	1a9231c9d336d97e5ca815b75b23314e.exe	90

C:\Users\Admin\AppData\Local\Temp\1a9231c9d336d97e5ca815b75b23314e.exe
"C:\Users\Admin\AppData\Local\Temp\1a9231c9d336d97e5ca815b75b23314e.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3080
- C:\Users\Admin\AppData\Local\Temp\1a9231c9d336d97e5ca815b75b23314e.exe
  ?
  2⤵
  PID:4820

memory/3080-0-0x0000000000400000-0x000000000041C000-memory.dmp

Filesize
112KB

Download
memory/3080-1-0x0000000000400000-0x000000000041C000-memory.dmp

Filesize
112KB

Download
memory/3080-4-0x00000000005C0000-0x00000000005C1000-memory.dmp

Filesize
4KB

Download
memory/3080-7-0x0000000000400000-0x000000000041C000-memory.dmp

Filesize
112KB

Download
memory/4820-6-0x0000000000400000-0x000000000041C000-memory.dmp

Filesize
112KB

Download
memory/4820-8-0x0000000000400000-0x000000000041C000-memory.dmp

Filesize
112KB

Download
memory/4820-12-0x0000000010000000-0x000000001000C000-memory.dmp

Filesize
48KB

Download
memory/4820-16-0x0000000000400000-0x000000000041C000-memory.dmp

Filesize
112KB

Download