e043d84058c3b7240738ccfef22155d70ffba639ac6b521d44174ac4006eea0c

Analysis

max time kernel
175s
max time network
175s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
24/12/2023, 14:38

Target

019a579edcbf2496973e8b7ed1bb4cf9.exe
Size

123KB
MD5

019a579edcbf2496973e8b7ed1bb4cf9
SHA1

3282104ab266fd78dc6935de1f5ac1f7e72f7898
SHA256

e043d84058c3b7240738ccfef22155d70ffba639ac6b521d44174ac4006eea0c
SHA512

0ec77c84b3b3d3f6a0d83195035c5b7d62a78d637e87f2afd43718310d48d3fb9e797df660666e052305d1d10af984a3034366d24544f19c774e682bc3fac4a7
SSDEEP

1536:u8ZNGdVMWZDvPOi11bmuNOFGuHh0044xx+IliVu7QVl8K1S6ivrQI1eNSw6fkWyY:u8/Gdrz1iFHC0pKJViQVl8mOrN8WyIX

Score

1^/10

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
1072	019a579edcbf2496973e8b7ed1bb4cf9.exe

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 1072 wrote to memory of 2756	1072	019a579edcbf2496973e8b7ed1bb4cf9.exe	92
PID 1072 wrote to memory of 2756	1072	019a579edcbf2496973e8b7ed1bb4cf9.exe	92
PID 1072 wrote to memory of 2756	1072	019a579edcbf2496973e8b7ed1bb4cf9.exe	92
PID 1072 wrote to memory of 2756	1072	019a579edcbf2496973e8b7ed1bb4cf9.exe	92
PID 1072 wrote to memory of 2756	1072	019a579edcbf2496973e8b7ed1bb4cf9.exe	92

memory/1072-0-0x0000000000400000-0x0000000000422000-memory.dmp

Filesize
136KB

Download
memory/1072-2-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/1072-4-0x0000000000420000-0x000000000042E000-memory.dmp

Filesize
56KB

Download
memory/1072-3-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/1072-1-0x0000000002200000-0x0000000002201000-memory.dmp

Filesize
4KB

Download