8ed0c9391e135195769a6af53cb8160e9a28cc2d5afbe829a0a108219fb72b83

Resubmissions

29/03/2024, 01:18

29/03/2024, 01:17

29/03/2024, 01:16

max time kernel
4s
max time network
4s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
29/03/2024, 01:18

Target

testestestestetw/jasdasdasdasd - Copy (24).exe
Size

1.2MB
MD5

d56d4b12a8d0f7d4a5a94c2ebe246513
SHA1

95543e702e65b8fa2a115c9bbd30b2feab11f9c7
SHA256

f290fa5dc611042d27c5bb90f063ea2583053c273b0ff9bc0209533038410991
SHA512

516a94e244e8650ed5eb358c2cd781f0c827dca33db14534570f908d1dc52c83492d8f63fbf0578f15f0db1ee3eb5ed184fc3b784698464184604bec1bf2ac1e
SSDEEP

24576:LdofGAmSIQ177wZ+A7MjiiRDXU/Sat5RgsLSmIOHsU5zMmX1xYwncqKvGqBO:LdofGbSIQ177wZvYjiiRDXASat5RgsLN

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3412	jasdasdasdasd - Copy (24).exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
3412	jasdasdasdasd - Copy (24).exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 4748 wrote to memory of 5100	4748	firefox.exe	87
PID 4748 wrote to memory of 5100	4748	firefox.exe	87
PID 4748 wrote to memory of 5100	4748	firefox.exe	87
PID 4748 wrote to memory of 5100	4748	firefox.exe	87
PID 4748 wrote to memory of 5100	4748	firefox.exe	87
PID 4748 wrote to memory of 5100	4748	firefox.exe	87
PID 4748 wrote to memory of 5100	4748	firefox.exe	87
PID 4748 wrote to memory of 5100	4748	firefox.exe	87
PID 4748 wrote to memory of 5100	4748	firefox.exe	87
PID 4748 wrote to memory of 5100	4748	firefox.exe	87
PID 4748 wrote to memory of 5100	4748	firefox.exe	87

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4748
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  PID:5100