6cf3b075b37e4b7c83d87cf2cc19573851ac6db14a1aa1dc87f52e0adcee8dd5

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
08/03/2024, 20:02

Target
6cf3b075b37e4b7c83d87cf2cc19573851ac6db14a1aa1dc87f52e0adcee8dd5.exe
Size 79KB
Sample240308-ysgdbaeh88
SHA256 6cf3b075b37e4b7c83d87cf2cc19573851ac6db14a1aa1dc87f52e0adcee8dd5
MD5 a89c903753e70cb2279e47195f3a49c5
SHA1 77e165f19cf9fb934ef01c987a8ff83116636c61
SHA512 8d534d3fe473b1bafd53a394e2bce4922381540005ee2d0b097c503a01f501540a7bd1cae743062994c946b8d96bb88e555c061459446abd6a5e34b1c95c0d22
SSDEEP 1536:zvBxiUe6NzJD/KUIxBOQA8AkqUhMb2nuy5wgIP0CSJ+5yNB8GMGlZ5G:zvBxigEU8wGdqU7uy5w9WMyNN5G
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
332	[email protected]

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 4932 wrote to memory of 3160	4932	6cf3b075b37e4b7c83d87cf2cc19573851ac6db14a1aa1dc87f52e0adcee8dd5.exe	88
PID 4932 wrote to memory of 3160	4932	6cf3b075b37e4b7c83d87cf2cc19573851ac6db14a1aa1dc87f52e0adcee8dd5.exe	88
PID 4932 wrote to memory of 3160	4932	6cf3b075b37e4b7c83d87cf2cc19573851ac6db14a1aa1dc87f52e0adcee8dd5.exe	88
PID 3160 wrote to memory of 332	3160	cmd.exe	89
PID 3160 wrote to memory of 332	3160	cmd.exe	89
PID 3160 wrote to memory of 332	3160	cmd.exe	89

C:\Users\Admin\AppData\Local\Temp\6cf3b075b37e4b7c83d87cf2cc19573851ac6db14a1aa1dc87f52e0adcee8dd5.exe
"C:\Users\Admin\AppData\Local\Temp\6cf3b075b37e4b7c83d87cf2cc19573851ac6db14a1aa1dc87f52e0adcee8dd5.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4932
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c [email protected]
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3160
- - C:\Users\Admin\AppData\Local\Temp\[email protected]
    [email protected]
    3⤵
    - Executes dropped EXE
    PID:332

Path C:\Users\Admin\AppData\Local\Temp\[email protected]
Size 79KB
SHA256 35b336017771811721d08178fa7036ed0e789cd232e7104aafc7131d4d76ff5f
MD5 f68d6ce0abb3edf2d4fc1d9af8808afa
SHA1 e8c399328e1e3f3edcb79a086a06b2d2851f1cae
SHA512 d495733803858f7289d489fbf613a6e00077b27e8191b3ecdf650a4e5f871eb449cadf22a6b7d873694864a5a779ec71fbbfcc40c59efaaa713c2edb6c1259e0
SSDEEP 1536:zv+vF0ocOQA8AkqUhMb2nuy5wgIP0CSJ+5yjB8GMGlZ5G:zv+vTpGdqU7uy5w9WMyjN5G
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/332-5-0x0000000000400000-0x000000000041B000-memory.dmp

Download

memory/4932-6-0x0000000000400000-0x000000000041B000-memory.dmp

Download