e8e06f56fab1aaffa67d955b3948c13c2b92ab2257a30c6d81fe6158cedbcb03

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
06/01/2024, 09:20

Target

45dda92e019d8023836a063b8a22a6e8.exe
Size

54KB
MD5

45dda92e019d8023836a063b8a22a6e8
SHA1

af079e0e1c5775faf30c4af82ca81d0721e7936b
SHA256

e8e06f56fab1aaffa67d955b3948c13c2b92ab2257a30c6d81fe6158cedbcb03
SHA512

7b1ca584fbe9a408db844e6f820e82887e9b340c63240957553b06eec9a6f895997781ba913ecc57ff96830a3c4ed171b509cd2448755a04d8b992edd652c0c3
SSDEEP

768:fevFI1m0on6HGavZUTQffoaFNnIoNQpMGZhD13APL3IcZfHDvL8YJRyQyXmW/f/:itV6HGav3gaIhD1ej7fjvXVCf/

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1700	45dda92e019d8023836a063b8a22a6e8.exe
1700	45dda92e019d8023836a063b8a22a6e8.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1700 wrote to memory of 1192	1700	45dda92e019d8023836a063b8a22a6e8.exe	7
PID 1700 wrote to memory of 1192	1700	45dda92e019d8023836a063b8a22a6e8.exe	7
PID 1700 wrote to memory of 1192	1700	45dda92e019d8023836a063b8a22a6e8.exe	7
PID 1700 wrote to memory of 1192	1700	45dda92e019d8023836a063b8a22a6e8.exe	7

memory/1192-6-0x000000007EFD0000-0x000000007EFD1000-memory.dmp

Filesize
4KB

Download
memory/1192-2-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/1700-0-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1700-5-0x0000000010000000-0x0000000010012000-memory.dmp

Filesize
72KB

Download
memory/1700-17-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download