6e22f06cd92930aa768e04119d422d809059038918c24946cc1a18ac41c777f3

Analysis

max time kernel
119s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25-12-2023 18:57

Target

362abc40637ecae947738acbc4c16ec1.exe
Size

212KB
MD5

362abc40637ecae947738acbc4c16ec1
SHA1

f2fa237553d32c4959e41e9de849ecaf4abd2716
SHA256

6e22f06cd92930aa768e04119d422d809059038918c24946cc1a18ac41c777f3
SHA512

71a930319051a0ab1b60500fd3dae8c9d3abf864f1fc5aadf1adc1e0d2a156f5a9fb2f0c3afe2fb346820af3426aa3f5a6d71a771f86b76fabc8b1cbd8352984
SSDEEP

3072:hcDHVhU2dP4X5o0oVqUYU9ggMjV3zeWHadG4JxIMpxvduJTVkBuE7P78l8Y/ELDw:hcDHf9eabipSGYxIM/ADD2eqk

Score

1^/10

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
2480	362abc40637ecae947738acbc4c16ec1.exe

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
2480	362abc40637ecae947738acbc4c16ec1.exe

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 2480 wrote to memory of 1204	2480	362abc40637ecae947738acbc4c16ec1.exe	10
PID 2480 wrote to memory of 1204	2480	362abc40637ecae947738acbc4c16ec1.exe	10
PID 2480 wrote to memory of 1204	2480	362abc40637ecae947738acbc4c16ec1.exe	10
PID 2480 wrote to memory of 1204	2480	362abc40637ecae947738acbc4c16ec1.exe	10
PID 2480 wrote to memory of 1204	2480	362abc40637ecae947738acbc4c16ec1.exe	10

memory/2480-0-0x00000000001B0000-0x00000000001D3000-memory.dmp

Filesize
140KB

Download
memory/2480-1-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download
memory/2480-2-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download