a790c231b703ab11bfb3b773fd8c970e2552cf128b45ffb24b528f204338fedf

Analysis

max time kernel
120s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
28/02/2024, 10:46

Target

abb1d3f00b77804080f39555c57ab517.exe
Size

147KB
MD5

abb1d3f00b77804080f39555c57ab517
SHA1

7f92eaf70a2920762e5bee98f0ce4510fbc84494
SHA256

a790c231b703ab11bfb3b773fd8c970e2552cf128b45ffb24b528f204338fedf
SHA512

edfdc9527f458f9568e0cb3b05ab4dd11670500724e91066a5847c1d701ab1ac23b88ee1b780e0064309ef43629900419c9a40d68a6772f8c3c619c2bed4935d
SSDEEP

3072:iM4XWTBP2TytF53TOiXMm5tNT0vq4ixn6POOmOX009I4iTA7Hro6CJp:iMuWNP2Tyb53ThX3Ei4ixnDOfkb4iW

Score

1^/10

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1852 wrote to memory of 2112	1852	abb1d3f00b77804080f39555c57ab517.exe	28
PID 1852 wrote to memory of 2112	1852	abb1d3f00b77804080f39555c57ab517.exe	28
PID 1852 wrote to memory of 2112	1852	abb1d3f00b77804080f39555c57ab517.exe	28
PID 1852 wrote to memory of 2112	1852	abb1d3f00b77804080f39555c57ab517.exe	28

C:\Users\Admin\AppData\Local\Temp\abb1d3f00b77804080f39555c57ab517.exe
"C:\Users\Admin\AppData\Local\Temp\abb1d3f00b77804080f39555c57ab517.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1852
- C:\Windows\Microsoft.NET\Framework\v2.0.50727\dw20.exe
  dw20.exe -x -s 432
  2⤵
  PID:2112

memory/1852-0-0x0000000073F00000-0x00000000744AB000-memory.dmp

Filesize
5.7MB

Download
memory/1852-1-0x0000000073F00000-0x00000000744AB000-memory.dmp

Filesize
5.7MB

Download
memory/1852-2-0x0000000000250000-0x0000000000290000-memory.dmp

Filesize
256KB

Download
memory/1852-4-0x0000000073F00000-0x00000000744AB000-memory.dmp

Filesize
5.7MB

Download
memory/1852-5-0x0000000000250000-0x0000000000290000-memory.dmp

Filesize
256KB

Download
memory/2112-3-0x0000000000550000-0x0000000000551000-memory.dmp

Filesize
4KB

Download
memory/2112-6-0x0000000000550000-0x0000000000551000-memory.dmp

Filesize
4KB

Download