a6d4d5931292365ed8bc26602ebfa2470cc81ba02cd1ef3380ea063b5498db6e

Analysis

max time kernel
117s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
08/03/2024, 01:49

Target

ba371146799d3597611d104e96bec4e7.exe
Size

1.1MB
MD5

ba371146799d3597611d104e96bec4e7
SHA1

248d5e4a36267cb941e9d7ee4e467598d199d053
SHA256

a6d4d5931292365ed8bc26602ebfa2470cc81ba02cd1ef3380ea063b5498db6e
SHA512

798ba6953b532b01057b3eb26450551cc10fc4202d9248e2857dce28b53b8a56fd35962e16d73e54c4944dc7514689ac46324b4d8d89a3d4ae430b9aa5cd9455
SSDEEP

24576:irTbzEJwtXH/xq9Pw/sFIYsFpSnFI8VeJYsQuYsmGaqEYD:irTboatX5q9PbFapSnFI8YSsQaaqHD

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3000	ba371146799d3597611d104e96bec4e7.exe
3000	ba371146799d3597611d104e96bec4e7.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 3000 wrote to memory of 1200	3000	ba371146799d3597611d104e96bec4e7.exe	21
PID 3000 wrote to memory of 1200	3000	ba371146799d3597611d104e96bec4e7.exe	21
PID 3000 wrote to memory of 1200	3000	ba371146799d3597611d104e96bec4e7.exe	21
PID 3000 wrote to memory of 1200	3000	ba371146799d3597611d104e96bec4e7.exe	21
PID 3000 wrote to memory of 1200	3000	ba371146799d3597611d104e96bec4e7.exe	21
PID 3000 wrote to memory of 1200	3000	ba371146799d3597611d104e96bec4e7.exe	21

memory/1200-6-0x000000007FFF0000-0x000000007FFF1000-memory.dmp

Filesize
4KB

Download
memory/1200-12-0x000000007EFC0000-0x000000007EFC6000-memory.dmp

Filesize
24KB

Download
memory/3000-0-0x0000000000270000-0x0000000000271000-memory.dmp

Filesize
4KB

Download
memory/3000-1-0x0000000001E80000-0x0000000001F68000-memory.dmp

Filesize
928KB

Download
memory/3000-2-0x0000000000400000-0x0000000000517000-memory.dmp

Filesize
1.1MB

Download
memory/3000-3-0x0000000000400000-0x0000000000517000-memory.dmp

Filesize
1.1MB

Download
memory/3000-4-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download
memory/3000-24-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download