2e02319b1ac8bb0ebf24126f0bce493befc2d8c8f97136e8c6c0b15a24be68c7

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
25/03/2024, 18:22

Target

Patch_Hit_n_Mix_RipX DAW PRO_7.0.2_MOCHA.exe
Size

5.8MB
MD5

5aa8f34d1bbfe70fe510e6f93a408c78
SHA1

79fe07a251dd912f95c4ac28aa84458570778935
SHA256

2e02319b1ac8bb0ebf24126f0bce493befc2d8c8f97136e8c6c0b15a24be68c7
SHA512

c847992883d8c136654bc2c5885ec8e2a77738d173719d11e7462f61f610ad6afc1984328fd2e0edc64e8f03f6569595a9656715acc0bbbf1febfaff3d835ec6
SSDEEP

98304:XkLpP65MK0UaW80mE254j9Z8y6BQ78IN//zYAOZC4fwt3eaXMr4prGuh8JRLkla+:sg5MKxaW8H/ELeBIN//zlWHf23PMcrpt

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
1772	Patch_Hit_n_Mix_RipX DAW PRO_7.0.2_MOCHA.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1380 wrote to memory of 1772	1380	Patch_Hit_n_Mix_RipX DAW PRO_7.0.2_MOCHA.exe	89
PID 1380 wrote to memory of 1772	1380	Patch_Hit_n_Mix_RipX DAW PRO_7.0.2_MOCHA.exe	89
PID 1380 wrote to memory of 1772	1380	Patch_Hit_n_Mix_RipX DAW PRO_7.0.2_MOCHA.exe	89

C:\Users\Admin\AppData\Local\Temp\Patch_Hit_n_Mix_RipX DAW PRO_7.0.2_MOCHA.exe
"C:\Users\Admin\AppData\Local\Temp\Patch_Hit_n_Mix_RipX DAW PRO_7.0.2_MOCHA.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1380
- C:\Users\Admin\AppData\Local\Temp\is-UA2EA.tmp\Patch_Hit_n_Mix_RipX DAW PRO_7.0.2_MOCHA.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-UA2EA.tmp\Patch_Hit_n_Mix_RipX DAW PRO_7.0.2_MOCHA.tmp" /SL5="$B002C,5196411,898560,C:\Users\Admin\AppData\Local\Temp\Patch_Hit_n_Mix_RipX DAW PRO_7.0.2_MOCHA.exe"
  2⤵
  - Executes dropped EXE
  PID:1772

C:\Users\Admin\AppData\Local\Temp\is-UA2EA.tmp\Patch_Hit_n_Mix_RipX DAW PRO_7.0.2_MOCHA.tmp

Filesize
3.1MB

MD5
8fd8ac761c7cc59637244d67257d761f

SHA1
a90cb0383026fcced0f0a1c50e2c792fdfcdbe29

SHA256
696c046163b4286b462c2c7df7a50b1f29e530d710f7d37e933acb990d2555f9

SHA512
444be3dd1e9060918e517f09cad6817a6cf7dd874dc1618e40a72508c5c894a00a3e89cdff7fad108bc43a3f45338c8ca6e2b83b4a2893fb1faf1b93e5ac199e

Download Submit
memory/1380-0-0x0000000000400000-0x00000000004E9000-memory.dmp

Filesize
932KB

Download
memory/1380-10-0x0000000000400000-0x00000000004E9000-memory.dmp

Filesize
932KB

Download
memory/1772-5-0x0000000000D40000-0x0000000000D41000-memory.dmp

Filesize
4KB

Download
memory/1772-8-0x0000000000400000-0x0000000000724000-memory.dmp

Filesize
3.1MB

Download