8a446e4ef09c891fd3164359f318d653ecbf2a1df964e784b81a3c09a072bac1

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
29/02/2024, 09:43

Target

ae34260e40fcbded33f25d4f1b6a0052.exe
Size

33KB
MD5

ae34260e40fcbded33f25d4f1b6a0052
SHA1

9355afd6de0b789986381624706534a386fbc8c1
SHA256

8a446e4ef09c891fd3164359f318d653ecbf2a1df964e784b81a3c09a072bac1
SHA512

e037e196c158e9bb2e6a9c7fe6d49199440c7fff8cb64782bc52e506480b208eeb8082f578053452df683e926fd10a6ea78b39934432ca29da8f19489f3916fb
SSDEEP

384:B0eSRW/oUs7mPqnIQ6ny9T4J5C309ILsqQCduaQQf6bCHzdbjmt8GPvnXpfb3885:B0ioiPqFqCsKyILB2ESPfXpw8U50

Score

1^/10

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 2568 wrote to memory of 588	2568	ae34260e40fcbded33f25d4f1b6a0052.exe	92
PID 2568 wrote to memory of 588	2568	ae34260e40fcbded33f25d4f1b6a0052.exe	92

C:\Users\Admin\AppData\Local\Temp\ae34260e40fcbded33f25d4f1b6a0052.exe
"C:\Users\Admin\AppData\Local\Temp\ae34260e40fcbded33f25d4f1b6a0052.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
  2⤵
  PID:588

memory/2568-0-0x0000000010000000-0x000000001000F01A-memory.dmp

Filesize
60KB

Download