38a7e574ece54f51df22cd005bcad92bced96d293974f2471b1998a97632458f

Analysis

max time kernel
144s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
12/02/2024, 14:24

Target

975e961a5d87bce08290e8db9e9c6f2d.exe
Size

961KB
MD5

975e961a5d87bce08290e8db9e9c6f2d
SHA1

fc14feb216ca4c2f4da8740303138154a328924e
SHA256

38a7e574ece54f51df22cd005bcad92bced96d293974f2471b1998a97632458f
SHA512

3b59046fa20c17f98716a281b94f148d01357d99c06d26446706e34efded4917f70f075e7e29b279c83c4325299ec59db53623a069c58ff806f2297033407558
SSDEEP

24576:5naX9fm/xYVyhnEYYsMLLTD1Xu5EsnqJMHtAhGQJxkTC:5aNCisnE2uLTUTpHU

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
5104	975e961a5d87bce08290e8db9e9c6f2d.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3716 wrote to memory of 5104	3716	975e961a5d87bce08290e8db9e9c6f2d.exe	84
PID 3716 wrote to memory of 5104	3716	975e961a5d87bce08290e8db9e9c6f2d.exe	84
PID 3716 wrote to memory of 5104	3716	975e961a5d87bce08290e8db9e9c6f2d.exe	84

C:\Users\Admin\AppData\Local\Temp\975e961a5d87bce08290e8db9e9c6f2d.exe
"C:\Users\Admin\AppData\Local\Temp\975e961a5d87bce08290e8db9e9c6f2d.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3716
- C:\Users\Admin\AppData\Local\Temp\is-MLU8U.tmp\975e961a5d87bce08290e8db9e9c6f2d.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-MLU8U.tmp\975e961a5d87bce08290e8db9e9c6f2d.tmp" /SL5="$401DE,741528,54272,C:\Users\Admin\AppData\Local\Temp\975e961a5d87bce08290e8db9e9c6f2d.exe"
  2⤵
  - Executes dropped EXE
  PID:5104

C:\Users\Admin\AppData\Local\Temp\is-MLU8U.tmp\975e961a5d87bce08290e8db9e9c6f2d.tmp

Filesize
688KB

MD5
67c5a4f36e1c91a3b85e440edd7ad026

SHA1
e49ea0e558ed682498cc61b3070e4c402fbf0912

SHA256
99c299d6565ab53d9af66e0146737dc0ecfbc52ecf4740825b552db0cc4210c6

SHA512
40522d4645ece0db9888ea40d1a11356aa5efc191184a0b97cb54a6c243532b1fc306e9095bbfa1f5dc02c8e52b709650230d1383532136e56caea3dc19a973e

Download Submit
memory/3716-0-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/3716-2-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/3716-13-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/5104-7-0x0000000002350000-0x0000000002351000-memory.dmp

Filesize
4KB

Download
memory/5104-14-0x0000000000400000-0x00000000004BC000-memory.dmp

Filesize
752KB

Download
memory/5104-17-0x0000000002350000-0x0000000002351000-memory.dmp

Filesize
4KB

Download