9a9ec27b87b7507adf39781f2f0d6cc5beeda31831149b59b0bb73212a54d36d

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
08/05/2024, 00:14

Target

9a9ec27b87b7507adf39781f2f0d6cc5beeda31831149b59b0bb73212a54d36d.exe
Size

210KB
MD5

3dba8f0ba68666e971c7581de7f2286f
SHA1

2d5e3acf710d497b0ad90a80df6a7ce16bf50e5a
SHA256

9a9ec27b87b7507adf39781f2f0d6cc5beeda31831149b59b0bb73212a54d36d
SHA512

56687d6f2ddb6c85b1fb0fd707da87bad11935f264ff8f0cc01b62666b8035208c07fe04cc550851db38f340603692729c0167b07489000cd72a0acd85215b29
SSDEEP

6144:Lx9fZTN2PdU/KXJcvvC9gYWqUndsByU/:tnM3XWn0g/qL

Score

1^/10

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2088 wrote to memory of 1244	2088	9a9ec27b87b7507adf39781f2f0d6cc5beeda31831149b59b0bb73212a54d36d.exe	28
PID 2088 wrote to memory of 1244	2088	9a9ec27b87b7507adf39781f2f0d6cc5beeda31831149b59b0bb73212a54d36d.exe	28
PID 2088 wrote to memory of 1244	2088	9a9ec27b87b7507adf39781f2f0d6cc5beeda31831149b59b0bb73212a54d36d.exe	28
PID 2088 wrote to memory of 1244	2088	9a9ec27b87b7507adf39781f2f0d6cc5beeda31831149b59b0bb73212a54d36d.exe	28

C:\Users\Admin\AppData\Local\Temp\9a9ec27b87b7507adf39781f2f0d6cc5beeda31831149b59b0bb73212a54d36d.exe
"C:\Users\Admin\AppData\Local\Temp\9a9ec27b87b7507adf39781f2f0d6cc5beeda31831149b59b0bb73212a54d36d.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2088
- C:\Windows\Microsoft.NET\Framework\v2.0.50727\dw20.exe
  dw20.exe -x -s 404
  2⤵
  PID:1244

memory/1244-3-0x0000000000600000-0x0000000000601000-memory.dmp

Filesize
4KB

Download
memory/1244-5-0x0000000000600000-0x0000000000601000-memory.dmp

Filesize
4KB

Download
memory/2088-0-0x0000000074B61000-0x0000000074B62000-memory.dmp

Filesize
4KB

Download
memory/2088-1-0x0000000074B60000-0x000000007510B000-memory.dmp

Filesize
5.7MB

Download
memory/2088-2-0x0000000074B60000-0x000000007510B000-memory.dmp

Filesize
5.7MB

Download
memory/2088-4-0x0000000074B60000-0x000000007510B000-memory.dmp

Filesize
5.7MB

Download