33edd1abb712c51a8dcad48c0e1455391766fef26d1f2e5932bb4a8a7e02a9cb

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
27-02-2024 22:14

Target

aa4a1edf1b7d38a6d5b2b6f89378e407.exe
Size

1.1MB
MD5

aa4a1edf1b7d38a6d5b2b6f89378e407
SHA1

3dfa6605ce88409286ed1be1af34bd03397a0fc7
SHA256

33edd1abb712c51a8dcad48c0e1455391766fef26d1f2e5932bb4a8a7e02a9cb
SHA512

33e0f4f3e446cfa3bca2d8c087ea49d063f7af83b20cd97047a534d6f03809803ddc79bc4bfa16d67ba227669efe9fa036ba800fbb6715fa64614133287371bd
SSDEEP

24576:O273DU9f476T3mDNiQWr/unJqZ0qYHNS8EUVYMHPG+y:OA3DUG2mzmOXtS8Uey

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2864	aa4a1edf1b7d38a6d5b2b6f89378e407.exe
2864	aa4a1edf1b7d38a6d5b2b6f89378e407.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 2864 wrote to memory of 1196	2864	aa4a1edf1b7d38a6d5b2b6f89378e407.exe	6
PID 2864 wrote to memory of 1196	2864	aa4a1edf1b7d38a6d5b2b6f89378e407.exe	6
PID 2864 wrote to memory of 1196	2864	aa4a1edf1b7d38a6d5b2b6f89378e407.exe	6
PID 2864 wrote to memory of 1196	2864	aa4a1edf1b7d38a6d5b2b6f89378e407.exe	6
PID 2864 wrote to memory of 1196	2864	aa4a1edf1b7d38a6d5b2b6f89378e407.exe	6
PID 2864 wrote to memory of 1196	2864	aa4a1edf1b7d38a6d5b2b6f89378e407.exe	6

memory/1196-3-0x000000007FFF0000-0x000000007FFF1000-memory.dmp

Filesize
4KB

Download
memory/1196-11-0x000000007EFC0000-0x000000007EFC6000-memory.dmp

Filesize
24KB

Download
memory/2864-1-0x0000000001C70000-0x0000000001D49000-memory.dmp

Filesize
868KB

Download
memory/2864-0-0x0000000000270000-0x0000000000271000-memory.dmp

Filesize
4KB

Download
memory/2864-4-0x0000000000400000-0x000000000050D000-memory.dmp

Filesize
1.1MB

Download
memory/2864-5-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download