1434330837cfca8f2015f9f7ac38fb101c2472176319a053e9fbc45459e7e058

Analysis

max time kernel
144s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
13/02/2024, 17:18

Target

Setup PES 6 The Den Patch 2023-24.exe
Size

3.9MB
MD5

01ab02d41aef2018099c29e76ae94307
SHA1

0c68f5c206a2e2d6916111929bddd82c71a9c572
SHA256

1434330837cfca8f2015f9f7ac38fb101c2472176319a053e9fbc45459e7e058
SHA512

e2646156a5c79ad3764866c9390e60fc4c85b5e613f517709c62eb5fd07b0af71ec9a7ede01fd97151c74cda7b0cb130d0e811f25e8b8be0b73fbb80439eee22
SSDEEP

49152:XBuZrEUm3VQp2+4BUE2yNYS2TrHp0YX3JJ6I+9ExxzapVz:xkLmOBE2yNKrHpXX3LWpVz

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
3324	Setup PES 6 The Den Patch 2023-24.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2796 wrote to memory of 3324	2796	Setup PES 6 The Den Patch 2023-24.exe	83
PID 2796 wrote to memory of 3324	2796	Setup PES 6 The Den Patch 2023-24.exe	83
PID 2796 wrote to memory of 3324	2796	Setup PES 6 The Den Patch 2023-24.exe	83

C:\Users\Admin\AppData\Local\Temp\Setup PES 6 The Den Patch 2023-24.exe
"C:\Users\Admin\AppData\Local\Temp\Setup PES 6 The Den Patch 2023-24.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2796
- C:\Users\Admin\AppData\Local\Temp\is-A8EJR.tmp\Setup PES 6 The Den Patch 2023-24.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-A8EJR.tmp\Setup PES 6 The Den Patch 2023-24.tmp" /SL5="$C0050,784896,0,C:\Users\Admin\AppData\Local\Temp\Setup PES 6 The Den Patch 2023-24.exe"
  2⤵
  - Executes dropped EXE
  PID:3324

C:\Users\Admin\AppData\Local\Temp\is-A8EJR.tmp\Setup PES 6 The Den Patch 2023-24.tmp

Filesize
3.0MB

MD5
c59ad07bcaaebeac04eeed2bd06fb2f3

SHA1
71f19435f3f0081b74a6ff4b1d84606870e5c01f

SHA256
f0a572e79728cd44a16ed4cc0cdfc5aaf6214230677320af5d0f94c6e088e5be

SHA512
e05e19d70f601e5e9a90cf1e4fde18ff03f4a7b319787189246e57e84d47c8b3cdfe0af24c92289ee3772787865165ef7bc2299fafdb1ab62b170894b6cbffa2

Download Submit
memory/2796-0-0x0000000000400000-0x00000000004CD000-memory.dmp

Filesize
820KB

Download
memory/2796-7-0x0000000000400000-0x00000000004CD000-memory.dmp

Filesize
820KB

Download
memory/3324-5-0x0000000000D20000-0x0000000000D21000-memory.dmp

Filesize
4KB

Download
memory/3324-8-0x0000000000400000-0x0000000000709000-memory.dmp

Filesize
3.0MB

Download
memory/3324-11-0x0000000000D20000-0x0000000000D21000-memory.dmp

Filesize
4KB

Download