52b4b24593c914b6b9f02bf9cd0bbc0962b1bfdb177cd43ca3c8702c185f7e79

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
11/03/2024, 21:37

Target

52b4b24593c914b6b9f02bf9cd0bbc0962b1bfdb177cd43ca3c8702c185f7e79.exe
Size

25KB
MD5

d3d40868ef5af34aea85baa07e9ad87e
SHA1

1fcf627d9ed1de00a68eb19af383b32dc3982bb2
SHA256

52b4b24593c914b6b9f02bf9cd0bbc0962b1bfdb177cd43ca3c8702c185f7e79
SHA512

de710e4cedd8d6430389ff791d6707dbd8cab1bccdb23b3de6a565702b740855a47334db9979c7a5eab3426fb600e73f6860396ac189133e08ea765fc18ad791
SSDEEP

384:l3LmRbriuInOqXssafSjL1kgPZKrz8xy14i4TfR2fJwly3+4cmTLZqRDzCAQ/0BK:R6gPZKrz8BKJw8+4c6ZqdzCk4z

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2504 wrote to memory of 2588	2504	52b4b24593c914b6b9f02bf9cd0bbc0962b1bfdb177cd43ca3c8702c185f7e79.exe	29
PID 2504 wrote to memory of 2588	2504	52b4b24593c914b6b9f02bf9cd0bbc0962b1bfdb177cd43ca3c8702c185f7e79.exe	29
PID 2504 wrote to memory of 2588	2504	52b4b24593c914b6b9f02bf9cd0bbc0962b1bfdb177cd43ca3c8702c185f7e79.exe	29

C:\Users\Admin\AppData\Local\Temp\52b4b24593c914b6b9f02bf9cd0bbc0962b1bfdb177cd43ca3c8702c185f7e79.exe
"C:\Users\Admin\AppData\Local\Temp\52b4b24593c914b6b9f02bf9cd0bbc0962b1bfdb177cd43ca3c8702c185f7e79.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2504
- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\dw20.exe
  dw20.exe -x -s 804
  2⤵
  PID:2588

memory/2504-0-0x000007FEF5720000-0x000007FEF60BD000-memory.dmp

Filesize
9.6MB

Download
memory/2504-1-0x0000000001FB0000-0x0000000002030000-memory.dmp

Filesize
512KB

Download
memory/2504-2-0x000007FEF5720000-0x000007FEF60BD000-memory.dmp

Filesize
9.6MB

Download
memory/2504-3-0x0000000001FB0000-0x0000000002030000-memory.dmp

Filesize
512KB

Download
memory/2504-7-0x000007FEF5720000-0x000007FEF60BD000-memory.dmp

Filesize
9.6MB

Download
memory/2504-8-0x0000000001FB0000-0x0000000002030000-memory.dmp

Filesize
512KB

Download
memory/2588-6-0x0000000000270000-0x0000000000271000-memory.dmp

Filesize
4KB

Download