04d76d86f3eb1851bf84a0d3c81595fcf5a477760ca56d916181cd68e111f1b4

Analysis

max time kernel
127s
max time network
154s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25/12/2023, 19:27

Target

37ee2352237ced6d1775b2f675275ac6.exe
Size

15KB
MD5

37ee2352237ced6d1775b2f675275ac6
SHA1

68517ecc673aeb626554ef166cc301fb2239e7e1
SHA256

04d76d86f3eb1851bf84a0d3c81595fcf5a477760ca56d916181cd68e111f1b4
SHA512

073a5f83f249d5d218b838e6579a929c3f456a8ec7a53c14f29366b2cba3e6d6db54a2d47f9cc0fb48c06ea4db1feb06f7623f4aecb487ea9ce3f5256ced1269
SSDEEP

192:tBvXqVjdBjpQZmynloYk4/JNIlLQq/by/cyUPB/iRgoXnqU:z6VdDQG4zaLQk8bU5/iRRXqU

Score

1^/10

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 636 wrote to memory of 1956	636	37ee2352237ced6d1775b2f675275ac6.exe	29
PID 636 wrote to memory of 1956	636	37ee2352237ced6d1775b2f675275ac6.exe	29
PID 636 wrote to memory of 1956	636	37ee2352237ced6d1775b2f675275ac6.exe	29
PID 636 wrote to memory of 1956	636	37ee2352237ced6d1775b2f675275ac6.exe	29

C:\Users\Admin\AppData\Local\Temp\37ee2352237ced6d1775b2f675275ac6.exe
"C:\Users\Admin\AppData\Local\Temp\37ee2352237ced6d1775b2f675275ac6.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:636
- C:\Windows\Microsoft.NET\Framework\v2.0.50727\dw20.exe
  dw20.exe -x -s 1444
  2⤵
  PID:1956

memory/636-0-0x0000000074C10000-0x00000000751BB000-memory.dmp

Filesize
5.7MB

Download
memory/636-1-0x0000000074C10000-0x00000000751BB000-memory.dmp

Filesize
5.7MB

Download
memory/636-2-0x00000000004A0000-0x00000000004E0000-memory.dmp

Filesize
256KB

Download
memory/636-3-0x0000000074C10000-0x00000000751BB000-memory.dmp

Filesize
5.7MB

Download
memory/636-4-0x0000000074C10000-0x00000000751BB000-memory.dmp

Filesize
5.7MB

Download
memory/636-5-0x00000000004A0000-0x00000000004E0000-memory.dmp

Filesize
256KB

Download
memory/1956-6-0x00000000003F0000-0x00000000003F1000-memory.dmp

Filesize
4KB

Download
memory/1956-7-0x00000000003F0000-0x00000000003F1000-memory.dmp

Filesize
4KB

Download