f39c0091f56186d91804f2051699ecdd1cce2bc6c51e133250653eff26b8e0f0

Analysis

max time kernel
152s
max time network
161s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
19-01-2024 16:41

Target

LegacyLauncher_Installer_mcl.exe
Size

112.3MB
MD5

71f8ce4a8f559dca25662bbaa496fa7f
SHA1

09899d58b121ef998d894ca01d9be6408be091c4
SHA256

f39c0091f56186d91804f2051699ecdd1cce2bc6c51e133250653eff26b8e0f0
SHA512

f3d5b6069893fc819b915487db6b8c067716c9d961ddfecb9c4b17c2fd4443a333905963cf626e258163a9509a59a5d33f7eb7c7c1108b7d08e27659447d8819
SSDEEP

1572864:OCR3EXzMNaTUn8gquVvsaq/cBwI2ek+b7r0nKT5wfomYadr420Dt7RweD+gT9i0:T3uINa4nR4EBNlh5QjYads267REgT9t

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
632	LegacyLauncher_Installer_mcl.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4628 wrote to memory of 632	4628	LegacyLauncher_Installer_mcl.exe	88
PID 4628 wrote to memory of 632	4628	LegacyLauncher_Installer_mcl.exe	88
PID 4628 wrote to memory of 632	4628	LegacyLauncher_Installer_mcl.exe	88

C:\Users\Admin\AppData\Local\Temp\LegacyLauncher_Installer_mcl.exe
"C:\Users\Admin\AppData\Local\Temp\LegacyLauncher_Installer_mcl.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4628
- C:\Users\Admin\AppData\Local\Temp\is-0KEPT.tmp\LegacyLauncher_Installer_mcl.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-0KEPT.tmp\LegacyLauncher_Installer_mcl.tmp" /SL5="$90218,115846600,1202688,C:\Users\Admin\AppData\Local\Temp\LegacyLauncher_Installer_mcl.exe"
  2⤵
  - Executes dropped EXE
  PID:632

C:\Users\Admin\AppData\Local\Temp\is-0KEPT.tmp\LegacyLauncher_Installer_mcl.tmp

Filesize
3.4MB

MD5
593cf730ff2ce30aa845e233442c5a8a

SHA1
f1aa311f76ef96d97895a78ea00dfd7900ff6bd7

SHA256
dfc6d2611a5d7ff0df3375ae45da91f31b9a1bc9e3a7b1580b39d8efdaf8d2bb

SHA512
5feac04c20261109cd241623ef6ceed9ee3ac9567d45bf766bc8592c329eb983b3053c004af741f420df8eae0f67ddd9effb36c2bc0d0bd79c7566257405fb6a

Download Submit
memory/632-6-0x0000000002870000-0x0000000002871000-memory.dmp

Filesize
4KB

Download
memory/632-9-0x0000000000400000-0x0000000000776000-memory.dmp

Filesize
3.5MB

Download
memory/632-12-0x0000000002870000-0x0000000002871000-memory.dmp

Filesize
4KB

Download
memory/4628-0-0x0000000000400000-0x0000000000533000-memory.dmp

Filesize
1.2MB

Download
memory/4628-8-0x0000000000400000-0x0000000000533000-memory.dmp

Filesize
1.2MB

Download