d5f43a2e575286eec044082899addbde36873c39d7fd2797aa13649fb797e2c8

Analysis

max time kernel
150s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
06/01/2024, 18:19

Target

Launcher.exe
Size

562KB
MD5

a8bca413af038d5461d904b55d2d6c0b
SHA1

1caf717886ed014ca6064112d8f916247db40173
SHA256

d5f43a2e575286eec044082899addbde36873c39d7fd2797aa13649fb797e2c8
SHA512

47dcc11d4360f2b54492573ae8460e26a689f121fc92d2e62d8ee44369de61d846cbc2e96183bbb8c244b8650723066e98246aa6c2c4107bc01aaf759ee57e31
SSDEEP

6144:/AeiJVXAP7LFEQ/gkBzfLDuSI7UqvGGxyhXFeZaSV62a1sGJMXsCid9uBWcj:LiPXAnFgIzDrIIqbSwxOj2X0DuI

Score

1^/10

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 2088 wrote to memory of 404	2088	Launcher.exe	21
PID 2088 wrote to memory of 404	2088	Launcher.exe	21

C:\Users\Admin\AppData\Local\Temp\Launcher.exe
"C:\Users\Admin\AppData\Local\Temp\Launcher.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2088
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c pause
  2⤵
  PID:404