f46246c1812f4b2269b41d0ecefe9adcf67835f5044ad3738e38fedf7f8dba77

Analysis

max time kernel
146s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
08/03/2024, 22:06

Target

f46246c1812f4b2269b41d0ecefe9adcf67835f5044ad3738e38fedf7f8dba77.exe
Size

285KB
MD5

061477018834647ddcbc99630a6edbe5
SHA1

a825d6eba292dd0278ac86e84be391a58f091613
SHA256

f46246c1812f4b2269b41d0ecefe9adcf67835f5044ad3738e38fedf7f8dba77
SHA512

8f2226035965801b522e7e428fbe1bb6e5fb7e1bfcbeb5112502f43485473777595ac41a8bcc6bfba93d41f1e334d20e207e7e58b04e2af1cee088b58a7b8bad
SSDEEP

1536:QB+jW4WeITA6igKTkB9G99WvSxWW1fNHB4FqcrPf0FScsSZg0Qf5yNZ:QXi+rG98vSxWWHaFdf0McTZg0Qf8N

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2180	lWsSyW.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2556 wrote to memory of 2180	2556	f46246c1812f4b2269b41d0ecefe9adcf67835f5044ad3738e38fedf7f8dba77.exe	90
PID 2556 wrote to memory of 2180	2556	f46246c1812f4b2269b41d0ecefe9adcf67835f5044ad3738e38fedf7f8dba77.exe	90
PID 2556 wrote to memory of 2180	2556	f46246c1812f4b2269b41d0ecefe9adcf67835f5044ad3738e38fedf7f8dba77.exe	90

C:\Users\Admin\AppData\Local\Temp\f46246c1812f4b2269b41d0ecefe9adcf67835f5044ad3738e38fedf7f8dba77.exe
"C:\Users\Admin\AppData\Local\Temp\f46246c1812f4b2269b41d0ecefe9adcf67835f5044ad3738e38fedf7f8dba77.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2556
- C:\lWsSyW.exe
  C:\lWsSyW.exe
  2⤵
  - Executes dropped EXE
  PID:2180

C:\lWsSyW.exe

Filesize
285KB

MD5
061477018834647ddcbc99630a6edbe5

SHA1
a825d6eba292dd0278ac86e84be391a58f091613

SHA256
f46246c1812f4b2269b41d0ecefe9adcf67835f5044ad3738e38fedf7f8dba77

SHA512
8f2226035965801b522e7e428fbe1bb6e5fb7e1bfcbeb5112502f43485473777595ac41a8bcc6bfba93d41f1e334d20e207e7e58b04e2af1cee088b58a7b8bad

Download Submit