3c04fbb7b3578f13a908a22bbfa105f54c17759d28fa8d036efec1fa6b7ed9f6

Analysis

max time kernel
152s
max time network
161s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
15-03-2024 20:23

Target

fl_patch_installer_20_7_1.exe
Size

83.8MB
MD5

f95e0b452331ebd0763ffb880f1814c9
SHA1

0c223c4d3a81f76019ed188480050c45144a54f6
SHA256

3c04fbb7b3578f13a908a22bbfa105f54c17759d28fa8d036efec1fa6b7ed9f6
SHA512

28ca4fec72d9d51194863d8a37327e7c824a8fb4eaaf34efa02269d585e34a7335e1f6ebd5dfa7f154f9d9f4724324a016ce64fa7be5451f50094527cd3dca92
SSDEEP

1572864:oCI1wqyIPz6fTB42pMhkiEfXwH4iZYPwOJtEcXtsmZj7vYXnxdO3nufvWaUHOCmr:oCI1wOP2NbpM6iaXwH9YoOJtzsijunye

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
3004	fl_patch_installer_20_7_1.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3628 wrote to memory of 3004	3628	fl_patch_installer_20_7_1.exe	90
PID 3628 wrote to memory of 3004	3628	fl_patch_installer_20_7_1.exe	90
PID 3628 wrote to memory of 3004	3628	fl_patch_installer_20_7_1.exe	90

C:\Users\Admin\AppData\Local\Temp\fl_patch_installer_20_7_1.exe
"C:\Users\Admin\AppData\Local\Temp\fl_patch_installer_20_7_1.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3628
- C:\Users\Admin\AppData\Local\Temp\is-CLOOR.tmp\fl_patch_installer_20_7_1.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-CLOOR.tmp\fl_patch_installer_20_7_1.tmp" /SL5="$601D2,87449283,125440,C:\Users\Admin\AppData\Local\Temp\fl_patch_installer_20_7_1.exe"
  2⤵
  - Executes dropped EXE
  PID:3004

C:\Users\Admin\AppData\Local\Temp\is-CLOOR.tmp\fl_patch_installer_20_7_1.tmp

Filesize
1.1MB

MD5
006c402fd22016b5a5a1c2180ca5ccc9

SHA1
dc8dae24ef11181d145c8d9f6f245f3b67a3e1d0

SHA256
5b246db2dfc1a5d000b0662e2a58e1cb9f89fdc87945597ec1e1f2f245fd7898

SHA512
caea20f48421f7918c9ead0316decba60460c74ff878666e0a48ae1e5b2eb41a37b03c1a59bc3aa416990e49cae155e19894461c28c225f4f9b42e184db289b1

Download Submit
memory/3004-5-0x0000000000700000-0x0000000000701000-memory.dmp

Filesize
4KB

Download
memory/3004-8-0x0000000000400000-0x000000000052E000-memory.dmp

Filesize
1.2MB

Download
memory/3004-11-0x0000000000700000-0x0000000000701000-memory.dmp

Filesize
4KB

Download
memory/3628-0-0x0000000000400000-0x0000000000429000-memory.dmp

Filesize
164KB

Download
memory/3628-7-0x0000000000400000-0x0000000000429000-memory.dmp

Filesize
164KB

Download