9baf7fbee2e201926f1b7974d5d09db33aece7bd49148a23b7108aed2cbbec5c

Analysis

max time kernel
145s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
16-01-2024 21:34

Target

60ee6f9a2741eb675a9982dde799e8c6.exe
Size

580KB
MD5

60ee6f9a2741eb675a9982dde799e8c6
SHA1

2b6e981b82554135bc19c6fc554a9830fe90fa0b
SHA256

9baf7fbee2e201926f1b7974d5d09db33aece7bd49148a23b7108aed2cbbec5c
SHA512

03f9dc139b8f7226493512a5a2460621be40879bf94c5baf862e42b9e7528225a1969440a93082d44faade10532e1025cac14f034055e4294dbe74fa8c492b6a
SSDEEP

12288:KDOVYiGEVIoPzTJ3bHu6nOo88qfhS6a64OVGJfuGnl0W:KKBIWzTJDum+8qfgNlX

Score

1^/10

Suspicious behavior: MapViewOfSection 1 IoCs

pid	Process
4604	60ee6f9a2741eb675a9982dde799e8c6.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4604 wrote to memory of 4156	4604	60ee6f9a2741eb675a9982dde799e8c6.exe	88
PID 4604 wrote to memory of 4156	4604	60ee6f9a2741eb675a9982dde799e8c6.exe	88
PID 4604 wrote to memory of 4156	4604	60ee6f9a2741eb675a9982dde799e8c6.exe	88

C:\Users\Admin\AppData\Local\Temp\60ee6f9a2741eb675a9982dde799e8c6.exe
"C:\Users\Admin\AppData\Local\Temp\60ee6f9a2741eb675a9982dde799e8c6.exe"
1⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of WriteProcessMemory
PID:4604
- C:\Users\Admin\AppData\Local\Temp\60ee6f9a2741eb675a9982dde799e8c6.exe
  "C:\Users\Admin\AppData\Local\Temp\60ee6f9a2741eb675a9982dde799e8c6.exe"
  2⤵
  PID:4156

memory/4604-0-0x00000000002E0000-0x0000000000301000-memory.dmp

Filesize
132KB

Download
memory/4604-1-0x00000000039D0000-0x00000000039D2000-memory.dmp

Filesize
8KB

Download
memory/4604-2-0x00000000002E0000-0x0000000000301000-memory.dmp

Filesize
132KB

Download