7f7dd6f96643a1a826d1c91a5217721f97474f171a6335c47d4c50a76c7aceaa

Analysis

max time kernel
1802s
max time network
1125s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
11/02/2024, 20:36

Target

audacity-win-3.4.2-32bit.exe
Size

13.8MB
MD5

79770d516b49a5839bbf4032c34a7bbc
SHA1

fed439037e5f1440dd371d0ca1fff6bcb632817f
SHA256

7f7dd6f96643a1a826d1c91a5217721f97474f171a6335c47d4c50a76c7aceaa
SHA512

ac0c8e3c6e5821ec374e7b79136ee9cc83f7135bcd2934eb3d83c7d69204ac12e3b0b821bcf60412c22a2d611658df21e2676a00cbc438a28ba98122e2ae8447
SSDEEP

393216:+HsVDWKyG7RRBw038vArRsZFZXP5eoawm+I:yAyQTw03jCZFZfTaaI

Score

4^/10

Executes dropped EXE 1 IoCs

pid	Process
3332	audacity-win-3.4.2-32bit.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 448 wrote to memory of 3332	448	audacity-win-3.4.2-32bit.exe	83
PID 448 wrote to memory of 3332	448	audacity-win-3.4.2-32bit.exe	83
PID 448 wrote to memory of 3332	448	audacity-win-3.4.2-32bit.exe	83

C:\Users\Admin\AppData\Local\Temp\audacity-win-3.4.2-32bit.exe
"C:\Users\Admin\AppData\Local\Temp\audacity-win-3.4.2-32bit.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:448
- C:\Users\Admin\AppData\Local\Temp\is-IUE4D.tmp\audacity-win-3.4.2-32bit.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-IUE4D.tmp\audacity-win-3.4.2-32bit.tmp" /SL5="$C0046,13325830,956416,C:\Users\Admin\AppData\Local\Temp\audacity-win-3.4.2-32bit.exe"
  2⤵
  - Executes dropped EXE
  PID:3332

C:\Users\Admin\AppData\Local\Temp\is-IUE4D.tmp\audacity-win-3.4.2-32bit.tmp

Filesize
3.2MB

MD5
5c394505f708326cd033cbf5faab4c6a

SHA1
d36ab330ce80ae47ac248f7518ef3982ee8dd015

SHA256
d9919e23f721bd4038f3bcc481584980b1392e60e5b2362ad87cb6611d409b80

SHA512
59172a4993cceaf71be390391f211d4178879a8ab6d7e1731d4b3f105e2a5f41d35038ebb9615bd439faae1be08b4949f136b93e2287ba8c01555195ec02ec48

Download Submit
memory/448-0-0x0000000000400000-0x00000000004F7000-memory.dmp

Filesize
988KB

Download
memory/448-6-0x0000000000400000-0x00000000004F7000-memory.dmp

Filesize
988KB

Download
memory/3332-5-0x0000000000A60000-0x0000000000A61000-memory.dmp

Filesize
4KB

Download
memory/3332-8-0x0000000000400000-0x0000000000732000-memory.dmp

Filesize
3.2MB

Download
memory/3332-11-0x0000000000A60000-0x0000000000A61000-memory.dmp

Filesize
4KB

Download