40a90ddd4f4491ee74b28bdea5524fc01a484ab827954f2d2f1cb25461610573

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
11-05-2024 17:47

Target

Super Hexagon/Super Hexagon/unins000.exe
Size

1.2MB
MD5

dc61e0db68d2417e0a2ea73e01182dcc
SHA1

a44a21cd1bfeb8dc1d7cc61ae44cf94e1059a9c3
SHA256

557285aa17977f5666cdaa33df8dd3836f72e5ea696ffef0ecfb16cc1c861d2e
SHA512

1f9058bc3c25f0361579baf820c700c5521c2f38480279a27db692845fdf2ba9b46f043b4ce69e11254c9f36b8ad429072bd40d04378f7243b7c813fe74363aa
SSDEEP

24576:0YwCLCUplZhgjXj8YcgoniqO3CBiO0jmS+Elzcy8ZNat1NC2Nx94B:PGUhni7eSRzcZEgMM

Score

7^/10

Executes dropped EXE 1 IoCs

Processes:

_iu14D2N.tmp

pid	Process
3076	_iu14D2N.tmp

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

unins000.exe

description	pid	Process	procid_target
PID 544 wrote to memory of 3076	544	unins000.exe	84
PID 544 wrote to memory of 3076	544	unins000.exe	84
PID 544 wrote to memory of 3076	544	unins000.exe	84

C:\Users\Admin\AppData\Local\Temp\Super Hexagon\Super Hexagon\unins000.exe
"C:\Users\Admin\AppData\Local\Temp\Super Hexagon\Super Hexagon\unins000.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:544
- C:\Users\Admin\AppData\Local\Temp\_iu14D2N.tmp
  "C:\Users\Admin\AppData\Local\Temp\_iu14D2N.tmp" /SECONDPHASE="C:\Users\Admin\AppData\Local\Temp\Super Hexagon\Super Hexagon\unins000.exe" /FIRSTPHASEWND=$401C6
  2⤵
  - Executes dropped EXE
  PID:3076

C:\Users\Admin\AppData\Local\Temp\_iu14D2N.tmp

Filesize
1.2MB

MD5
dc61e0db68d2417e0a2ea73e01182dcc

SHA1
a44a21cd1bfeb8dc1d7cc61ae44cf94e1059a9c3

SHA256
557285aa17977f5666cdaa33df8dd3836f72e5ea696ffef0ecfb16cc1c861d2e

SHA512
1f9058bc3c25f0361579baf820c700c5521c2f38480279a27db692845fdf2ba9b46f043b4ce69e11254c9f36b8ad429072bd40d04378f7243b7c813fe74363aa

Download Submit
memory/544-0-0x00000000023F0000-0x00000000023F1000-memory.dmp

Filesize
4KB

Download
memory/544-14-0x0000000000400000-0x0000000000537000-memory.dmp

Filesize
1.2MB

Download
memory/3076-6-0x00000000022E0000-0x00000000022E1000-memory.dmp

Filesize
4KB

Download
memory/3076-13-0x0000000000400000-0x0000000000537000-memory.dmp

Filesize
1.2MB

Download