f9daa8d6a300bd61185bafb7fbac649fa40ebe1e2fae2eb04ef10cc51b8b661a

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
28/02/2024, 02:40

Target

aaca7099f12fa8db86237c293f998634.exe
Size

1.9MB
MD5

aaca7099f12fa8db86237c293f998634
SHA1

827e77dbc4720948d30223d3540e61ea1d8f40d3
SHA256

f9daa8d6a300bd61185bafb7fbac649fa40ebe1e2fae2eb04ef10cc51b8b661a
SHA512

831906630a241cc374144d9ffa9654758342a6bf3797e272aade57b67105c7970cb7b56d35d8156f295f8efa67458c7b7c3498f113e02c7312aecff0428d2ee0
SSDEEP

49152:Qoa1taC070dMtw2Xg7GUAi90jQQUWw1vLgQ:Qoa1taC0dt2dmjDw1vLgQ

Score

7^/10

Deletes itself 1 IoCs

pid	Process
4100	53BD.tmp

Executes dropped EXE 1 IoCs

pid	Process
4100	53BD.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 216 wrote to memory of 4100	216	aaca7099f12fa8db86237c293f998634.exe	91
PID 216 wrote to memory of 4100	216	aaca7099f12fa8db86237c293f998634.exe	91
PID 216 wrote to memory of 4100	216	aaca7099f12fa8db86237c293f998634.exe	91

C:\Users\Admin\AppData\Local\Temp\aaca7099f12fa8db86237c293f998634.exe
"C:\Users\Admin\AppData\Local\Temp\aaca7099f12fa8db86237c293f998634.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:216
- C:\Users\Admin\AppData\Local\Temp\53BD.tmp
  "C:\Users\Admin\AppData\Local\Temp\53BD.tmp" --splashC:\Users\Admin\AppData\Local\Temp\aaca7099f12fa8db86237c293f998634.exe 453E93B9747D8D98635976ADC3773688DAF9F6184BEEE63996DFD9B0268D43C6E6FFA2C76AE2076F2F45A0FFFA50D4B024B093744928194370AFDB30141A0FC2
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:4100

C:\Users\Admin\AppData\Local\Temp\53BD.tmp

Filesize
1.9MB

MD5
7dff4f10bda817b02597a3eb223ee69d

SHA1
bb2dd45a061e5cf39e49fafa611c45db88cbafda

SHA256
0c5e64d58140f0010658193c6fe12b9dd9531c9bd210924149440b271297a13e

SHA512
b9d8f3c907d4194320a8dd7b7fd4da8258849d07d69530d305a794d0cab6268d1478884c7f35f390a36d378aea7f1cd1d6f1ef0a164af6fb1fd2ab7a56cd25e2

Download Submit
memory/216-0-0x0000000000400000-0x00000000005E6000-memory.dmp

Filesize
1.9MB

Download
memory/4100-5-0x0000000000400000-0x00000000005E6000-memory.dmp

Filesize
1.9MB

Download