fd328064aca884de879d51f6cc1176a1a3ee8921c1645c510b1d6a7cb8b3775a

Analysis

max time kernel
151s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
18/03/2024, 19:54

Target

d4610c9183fe231bc3d38cc15746acd4.exe
Size

1.9MB
MD5

d4610c9183fe231bc3d38cc15746acd4
SHA1

7879b31fe1720017b1a8a26cb4dce58531a2ad04
SHA256

fd328064aca884de879d51f6cc1176a1a3ee8921c1645c510b1d6a7cb8b3775a
SHA512

5b9724a3f01586e4a443927a8446e8125caab7739604d760344a0a9084415267d64d658839def61b0b1c7a36980235fcaf4f1df324cac31de85b0ef73dc6d83c
SSDEEP

49152:Qoa1taC070dL5La1h077wXKIyltrzo7uk7yymWvK:Qoa1taC0SKiCJG/obyyXK

Score

7^/10

Deletes itself 1 IoCs

pid	Process
2180	6EC7.tmp

Executes dropped EXE 1 IoCs

pid	Process
2180	6EC7.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 5076 wrote to memory of 2180	5076	d4610c9183fe231bc3d38cc15746acd4.exe	90
PID 5076 wrote to memory of 2180	5076	d4610c9183fe231bc3d38cc15746acd4.exe	90
PID 5076 wrote to memory of 2180	5076	d4610c9183fe231bc3d38cc15746acd4.exe	90

C:\Users\Admin\AppData\Local\Temp\d4610c9183fe231bc3d38cc15746acd4.exe
"C:\Users\Admin\AppData\Local\Temp\d4610c9183fe231bc3d38cc15746acd4.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5076
- C:\Users\Admin\AppData\Local\Temp\6EC7.tmp
  "C:\Users\Admin\AppData\Local\Temp\6EC7.tmp" --splashC:\Users\Admin\AppData\Local\Temp\d4610c9183fe231bc3d38cc15746acd4.exe 891AD59A5D8BA5CE46571F6000DECA17D1366B52099C1F5ABE8F823C6262BD2988E39CCCB648AE0F8DC014CD99D03F6B6372FB8033BF7974ED3543E0A2DBFCDF
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:2180

C:\Users\Admin\AppData\Local\Temp\6EC7.tmp

Filesize
1.9MB

MD5
277f0060da04ae24edb56d2a24607aa3

SHA1
d2fd72459a29d430f0e31bef269906f9cf27eac7

SHA256
63d4bddcdfe1355f898ceeab4d31ba14f0d8d603459415997e69b4f01ee83668

SHA512
1c71731c2ee892c418cb2a2397ec9eda37e3d17e6572a4ab57b329a16bfe25fc16bd0ae9a30c1a00eac8cd67d17bf7d0a08d46a5bc28d6d1a33a7d3d580b5690

Download Submit
memory/2180-5-0x0000000000400000-0x00000000005E6000-memory.dmp

Filesize
1.9MB

Download
memory/5076-0-0x0000000000400000-0x00000000005E6000-memory.dmp

Filesize
1.9MB

Download