8fd3d502525f21d48a8f99913556b0a6d31b36b7ce6e140ab112321d8445ccf1

Analysis

max time kernel
145s
max time network
116s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25/12/2023, 10:34

Target

178b44a1c68202bb71c1431d7355b64e.exe
Size

1.5MB
MD5

178b44a1c68202bb71c1431d7355b64e
SHA1

40413ef1a0cf2ad19c2bb6c1c48fcd1146316530
SHA256

8fd3d502525f21d48a8f99913556b0a6d31b36b7ce6e140ab112321d8445ccf1
SHA512

fd79c9aed912193c7a67878848754be169f91bb42734412c59cb62e8eba5618d0bbe462589e2941715eba92adb9d26e64f0581c0d21e62d64e5cf52be0594f94
SSDEEP

24576:e9dG37Vk0R07Qanm9nR53D1ckM2NMbrgX6UZzbY1Y4kbp7S48a+KnMCjrZ9wFeRJ:lrq0R07QQm5D2dgK0XY1X4pWKnzhCFa

Score

7^/10

Deletes itself 1 IoCs

pid	Process
2760	55B1.tmp

Executes dropped EXE 1 IoCs

pid	Process
2760	55B1.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2984 wrote to memory of 2760	2984	178b44a1c68202bb71c1431d7355b64e.exe	21
PID 2984 wrote to memory of 2760	2984	178b44a1c68202bb71c1431d7355b64e.exe	21
PID 2984 wrote to memory of 2760	2984	178b44a1c68202bb71c1431d7355b64e.exe	21

C:\Users\Admin\AppData\Local\Temp\178b44a1c68202bb71c1431d7355b64e.exe
"C:\Users\Admin\AppData\Local\Temp\178b44a1c68202bb71c1431d7355b64e.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2984
- C:\Users\Admin\AppData\Local\Temp\55B1.tmp
  "C:\Users\Admin\AppData\Local\Temp\55B1.tmp" --pingC:\Users\Admin\AppData\Local\Temp\178b44a1c68202bb71c1431d7355b64e.exe 7377EBA944AA794781CB827A233002768E7395E3CB4F65495A24E1C452FFA40FC50E362E0318B300BD15CDF2383D79A8AB00664FE9BAA00EC3932CA76098A401
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:2760

memory/2760-8-0x0000000000190000-0x000000000035E000-memory.dmp

Filesize
1.8MB

Download
memory/2760-7-0x00000000022C0000-0x000000000233A000-memory.dmp

Filesize
488KB

Download
memory/2984-2-0x0000000002F00000-0x0000000002F7A000-memory.dmp

Filesize
488KB

Download
memory/2984-0-0x0000000000940000-0x0000000000B0E000-memory.dmp

Filesize
1.8MB

Download