515e8fddf9d66c4623ee058e4b9c871134b373b96f21ba2961ff18c8c8f59e72

Analysis

max time kernel
142s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
14-03-2024 22:20

Target

c9c2ffb887731bfb00c00f1cb2efa4fc.exe
Size

1.9MB
MD5

c9c2ffb887731bfb00c00f1cb2efa4fc
SHA1

4542e49a61411cb309ee9298c4262b5644de162f
SHA256

515e8fddf9d66c4623ee058e4b9c871134b373b96f21ba2961ff18c8c8f59e72
SHA512

a0a543b68a4e1efa04ff57763dd3c788e3fb65c080d26cfa50a6e7d7ab9e46396e2a61a397fbc817cc196c95da662d1cbb2467092bfc11dac25aa1ff2ddb1dae
SSDEEP

24576:N2oo60HPdt+1CRiY2eOBvcj3u10d2FRVwSyFTwnIbntO0VPk/LbS6V+GAEepoH0R:Qoa1taC070dPDJXwJ3FExj4IlUanbCc

Score

7^/10

Deletes itself 1 IoCs

pid	Process
2992	CC49.tmp

Executes dropped EXE 1 IoCs

pid	Process
2992	CC49.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3936 wrote to memory of 2992	3936	c9c2ffb887731bfb00c00f1cb2efa4fc.exe	91
PID 3936 wrote to memory of 2992	3936	c9c2ffb887731bfb00c00f1cb2efa4fc.exe	91
PID 3936 wrote to memory of 2992	3936	c9c2ffb887731bfb00c00f1cb2efa4fc.exe	91

C:\Users\Admin\AppData\Local\Temp\c9c2ffb887731bfb00c00f1cb2efa4fc.exe
"C:\Users\Admin\AppData\Local\Temp\c9c2ffb887731bfb00c00f1cb2efa4fc.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3936
- C:\Users\Admin\AppData\Local\Temp\CC49.tmp
  "C:\Users\Admin\AppData\Local\Temp\CC49.tmp" --splashC:\Users\Admin\AppData\Local\Temp\c9c2ffb887731bfb00c00f1cb2efa4fc.exe 9DBA8263BEA99268DB8B85BC5ADCE6F8C28916F4BAFF1E5B36AB9BD84F32BB8B94A03F00057BCFF97F9DD93581D9B7D11635DE65165ACF8CA09FC1004A5276E0
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:2992

C:\Users\Admin\AppData\Local\Temp\CC49.tmp

Filesize
1.9MB

MD5
e24c55812cc2adfa25997c56b0c5fa7f

SHA1
87a684fc6cb09b03c0381b69f70eb9605e4100ef

SHA256
e9028bbfba428cc313f160034fc4ae5c85e6a13b6925c943704373c2bdfc0035

SHA512
49a0a184fe49f9d45ebf1a93b56f90a2ca4d2e31ff57c3c7a2c5001aa46bec76ce16135440dae8cf131af35a22717313191d478bef072ad0c6438854e10becf9

Download Submit
memory/2992-5-0x0000000000400000-0x00000000005E6000-memory.dmp

Filesize
1.9MB

Download
memory/3936-0-0x0000000000400000-0x00000000005E6000-memory.dmp

Filesize
1.9MB

Download