23377b800d5d25788230190c57ca67c894624a707563b22c39c046365b33ea0f

Analysis

max time kernel
158s
max time network
172s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
30/12/2023, 08:11

Target

13144d8dbc7988f27622a0c6f8064adc.exe
Size

3.0MB
MD5

13144d8dbc7988f27622a0c6f8064adc
SHA1

ee6b01855b82aa557aaeade4d42717b41370983e
SHA256

23377b800d5d25788230190c57ca67c894624a707563b22c39c046365b33ea0f
SHA512

52038ee25947ae69724c70d6d99eb8abb2ea794f6fbbbed8722cbdf0644fa1567b585aa2f97dc1295d8d4c1b231417e00e73e94cdb5456a29386bc839dd05b30
SSDEEP

49152:f2q5e3oF/QvqkIsVLugpsTXnQMIk34rTUrQXW5ost+mqUbYzvAYvIrR8SGRAUmct:+q5syMIqLxpsLfGgrsbscmlnYvIDIsdQ

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2200	13144d8dbc7988f27622a0c6f8064adc.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2244 wrote to memory of 2200	2244	13144d8dbc7988f27622a0c6f8064adc.exe	91
PID 2244 wrote to memory of 2200	2244	13144d8dbc7988f27622a0c6f8064adc.exe	91
PID 2244 wrote to memory of 2200	2244	13144d8dbc7988f27622a0c6f8064adc.exe	91

C:\Users\Admin\AppData\Local\Temp\13144d8dbc7988f27622a0c6f8064adc.exe
"C:\Users\Admin\AppData\Local\Temp\13144d8dbc7988f27622a0c6f8064adc.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2244
- C:\Users\Admin\AppData\Local\Temp\is-I5C3S.tmp\13144d8dbc7988f27622a0c6f8064adc.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-I5C3S.tmp\13144d8dbc7988f27622a0c6f8064adc.tmp" /SL5="$12006C,2885213,54272,C:\Users\Admin\AppData\Local\Temp\13144d8dbc7988f27622a0c6f8064adc.exe"
  2⤵
  - Executes dropped EXE
  PID:2200

C:\Users\Admin\AppData\Local\Temp\is-I5C3S.tmp\13144d8dbc7988f27622a0c6f8064adc.tmp

Filesize
695KB

MD5
620f32e56b46e90e8aee43febc59f6e3

SHA1
d5edd63dd1390a1420b85f746e12a66625ae9354

SHA256
bcc9d63213012bf25a37f48015e5f755d359f3b08d05d35319b03b4a72710730

SHA512
8a9d2a2eb3891265cec379978399ad6c9b4bf3e12e0f381946b4390621b943b97fa04fbb87ad628652bd765b706eb2ff56001f24de24e9bcc487a59ca2f07d9c

Download Submit
memory/2200-8-0x0000000002350000-0x0000000002351000-memory.dmp

Filesize
4KB

Download
memory/2200-15-0x0000000000400000-0x00000000004BD000-memory.dmp

Filesize
756KB

Download
memory/2200-17-0x0000000000400000-0x00000000004BD000-memory.dmp

Filesize
756KB

Download
memory/2200-18-0x0000000002350000-0x0000000002351000-memory.dmp

Filesize
4KB

Download
memory/2244-0-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/2244-2-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/2244-7-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/2244-14-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download