ca8bbc5f347cc98c5a9d162bda11b427a114979c217908facaf5266e00c3b380

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
28/02/2024, 02:33

Target

aac7cdba642ae5b8b082e020faf83be2.exe
Size

1.1MB
MD5

aac7cdba642ae5b8b082e020faf83be2
SHA1

cdede1223617cacd56abafbcaed21aaba40c2e9f
SHA256

ca8bbc5f347cc98c5a9d162bda11b427a114979c217908facaf5266e00c3b380
SHA512

cba9592f66f25bdd33df73bf1b5fa904d65fa419aac9ca25f396132996ffbf0a9ef3a3914d8a5774c35e28cf570ca22186a14a119535ab348038c84999c43ef8
SSDEEP

24576:AC+du8KIjqn4PdlrMVGwXvNDX7AnhTjoF+4/E+v3LJ:ARd4IO4V+VGwXvpChPo+4c+v3F

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2432	aac7cdba642ae5b8b082e020faf83be2.exe
2432	aac7cdba642ae5b8b082e020faf83be2.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 2432 wrote to memory of 1152	2432	aac7cdba642ae5b8b082e020faf83be2.exe	7
PID 2432 wrote to memory of 1152	2432	aac7cdba642ae5b8b082e020faf83be2.exe	7
PID 2432 wrote to memory of 1152	2432	aac7cdba642ae5b8b082e020faf83be2.exe	7
PID 2432 wrote to memory of 1152	2432	aac7cdba642ae5b8b082e020faf83be2.exe	7
PID 2432 wrote to memory of 1152	2432	aac7cdba642ae5b8b082e020faf83be2.exe	7
PID 2432 wrote to memory of 1152	2432	aac7cdba642ae5b8b082e020faf83be2.exe	7

memory/1152-4-0x000000007FFF0000-0x000000007FFF1000-memory.dmp

Filesize
4KB

Download
memory/1152-12-0x000000007EFC0000-0x000000007EFC6000-memory.dmp

Filesize
24KB

Download
memory/2432-2-0x0000000001DC0000-0x0000000001EA9000-memory.dmp

Filesize
932KB

Download
memory/2432-1-0x0000000000530000-0x0000000000531000-memory.dmp

Filesize
4KB

Download
memory/2432-0-0x0000000000400000-0x000000000051A000-memory.dmp

Filesize
1.1MB

Download
memory/2432-5-0x0000000000400000-0x000000000051A000-memory.dmp

Filesize
1.1MB

Download
memory/2432-6-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download