8a955482091d20b143bc888d97f198806e6071f3789d1c083490a847f7534501

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
28/12/2023, 21:25

Target

f927e0af8ab0b4963efdd2c35f77c270.exe
Size

168KB
MD5

f927e0af8ab0b4963efdd2c35f77c270
SHA1

40a68e7f49bf6af45f2375778811fd627bce38fc
SHA256

8a955482091d20b143bc888d97f198806e6071f3789d1c083490a847f7534501
SHA512

dc508f64e0c8a9428607d4efa4cadcbdbb70773bb1bd2a8b03adb530692ff6e6ed97608a9b2950ab22d72d3cf04d498bfc42622b7108c2ef5e49a139cab1c0ff
SSDEEP

3072:PaK+tsB/z19bjhpbKFT0vjjjgCP5qc1aDXsmamp5JyPtIzoaly8/Qt9yQlmJba6D:+tU19bjhpbKFT0vjjjgI5qcQw7mjJy2w

Score

1^/10

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1072 wrote to memory of 1672	1072	f927e0af8ab0b4963efdd2c35f77c270.exe	28
PID 1072 wrote to memory of 1672	1072	f927e0af8ab0b4963efdd2c35f77c270.exe	28
PID 1072 wrote to memory of 1672	1072	f927e0af8ab0b4963efdd2c35f77c270.exe	28
PID 1072 wrote to memory of 1672	1072	f927e0af8ab0b4963efdd2c35f77c270.exe	28

C:\Users\Admin\AppData\Local\Temp\f927e0af8ab0b4963efdd2c35f77c270.exe
"C:\Users\Admin\AppData\Local\Temp\f927e0af8ab0b4963efdd2c35f77c270.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1072
- C:\Windows\Microsoft.NET\Framework\v2.0.50727\dw20.exe
  dw20.exe -x -s 436
  2⤵
  PID:1672

memory/1072-0-0x0000000074400000-0x00000000749AB000-memory.dmp

Filesize
5.7MB

Download
memory/1072-1-0x0000000002170000-0x00000000021B0000-memory.dmp

Filesize
256KB

Download
memory/1072-2-0x0000000074400000-0x00000000749AB000-memory.dmp

Filesize
5.7MB

Download
memory/1072-3-0x0000000074400000-0x00000000749AB000-memory.dmp

Filesize
5.7MB

Download
memory/1072-5-0x0000000074400000-0x00000000749AB000-memory.dmp

Filesize
5.7MB

Download
memory/1072-6-0x0000000002170000-0x00000000021B0000-memory.dmp

Filesize
256KB

Download
memory/1672-4-0x0000000000340000-0x0000000000341000-memory.dmp

Filesize
4KB

Download