6044e92908ced3db8770db085aed180797b44dad3d34ba5a2a23c28be2c9ab80

Analysis

max time kernel
147s
max time network
136s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
31/12/2023, 06:28

Target

2bb8769fdc960723c35ed446d457676c.exe
Size

87KB
MD5

2bb8769fdc960723c35ed446d457676c
SHA1

97cbf4fa2f48cf1dc027aa75f1f670978564beda
SHA256

6044e92908ced3db8770db085aed180797b44dad3d34ba5a2a23c28be2c9ab80
SHA512

05ff1ed4fd84880c044900d52ec2fe36fd6efd9231699b65349a0cef4d0366e9546f11c555d2e41a00c7aa2eddfc9f207b238728477f17a3ba11ce82dc7d6f57
SSDEEP

1536:O7CCRUVEW2nI0uiAtGDWkajpqMsPB4U0PewCqI+t2+guDQB++cCkn+Nvy17U6nuk:6OfeI0mtGDWhFU0DI42+ftd1Ex0d

Score

1^/10

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
5788	2bb8769fdc960723c35ed446d457676c.exe

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 5788 wrote to memory of 556	5788	2bb8769fdc960723c35ed446d457676c.exe	21
PID 5788 wrote to memory of 556	5788	2bb8769fdc960723c35ed446d457676c.exe	21
PID 5788 wrote to memory of 556	5788	2bb8769fdc960723c35ed446d457676c.exe	21
PID 5788 wrote to memory of 556	5788	2bb8769fdc960723c35ed446d457676c.exe	21
PID 5788 wrote to memory of 556	5788	2bb8769fdc960723c35ed446d457676c.exe	21

memory/5788-0-0x0000000000400000-0x0000000000418000-memory.dmp

Filesize
96KB

Download
memory/5788-1-0x00000000005C0000-0x00000000005C2000-memory.dmp

Filesize
8KB

Download
memory/5788-7-0x0000000000A20000-0x0000000000A2E000-memory.dmp

Filesize
56KB

Download
memory/5788-6-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/5788-5-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/5788-3-0x00000000005D0000-0x00000000005E2000-memory.dmp

Filesize
72KB

Download