e266ff9744caded6da686dd9f71a86cbefd4c93a96b2d54c37b431bd851cbfb1

Analysis

max time kernel
122s
max time network
130s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
06-03-2024 18:10

Target

b80b3df81d659bc039b0ba3e435544c5.exe
Size

15KB
MD5

b80b3df81d659bc039b0ba3e435544c5
SHA1

a7634f4efce612e27796856215d8a7d449cc651d
SHA256

e266ff9744caded6da686dd9f71a86cbefd4c93a96b2d54c37b431bd851cbfb1
SHA512

b1bfe0b42a9f119ccd827a3d5231541d723a1d914e775bcfd7b6d0f47dab01a9889013cc97446121c79e9e80e9d95682ca7e56214f753ddf1f0f83b653489f37
SSDEEP

192:nzjHZriBipoLzYGqfz5P+V8Wa8aVCpiQySkBLsP2aardZAB1FeXNQjcWSHxHd5Zy:X5xpAzzq9PJQ/kVsmfi69AzOwD

Score

1^/10

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 2120 wrote to memory of 2340	2120	b80b3df81d659bc039b0ba3e435544c5.exe	28
PID 2120 wrote to memory of 2340	2120	b80b3df81d659bc039b0ba3e435544c5.exe	28
PID 2120 wrote to memory of 2340	2120	b80b3df81d659bc039b0ba3e435544c5.exe	28
PID 2120 wrote to memory of 2340	2120	b80b3df81d659bc039b0ba3e435544c5.exe	28
PID 2120 wrote to memory of 2340	2120	b80b3df81d659bc039b0ba3e435544c5.exe	28

C:\Users\Admin\AppData\Local\Temp\b80b3df81d659bc039b0ba3e435544c5.exe
"C:\Users\Admin\AppData\Local\Temp\b80b3df81d659bc039b0ba3e435544c5.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2120
- C:\Windows\SysWOW64\notepad.exe
  notepad.exe
  2⤵
  PID:2340

memory/2120-3-0x0000000013140000-0x000000001314B000-memory.dmp

Filesize
44KB

Download
memory/2340-0-0x0000000013140000-0x000000001314B000-memory.dmp

Filesize
44KB

Download
memory/2340-2-0x0000000013140000-0x000000001314B000-memory.dmp

Filesize
44KB

Download