04ecc10cab96832c0322cde368ba98b01f2b3b8d5f3677def16ca533028e701b

Analysis

max time kernel
0s
max time network
194s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
17/05/2024, 08:14

Reason

Reading agent response: read tcp 10.127.0.1:36078->10.127.1.111:8000: read: connection timed out

Target

bahs.us.h/ninja/lib/index.html
Size

13B
MD5

c83301425b2ad1d496473a5ff3d9ecca
SHA1

941efb7368e46b27b937d34b07fc4d41da01b002
SHA256

b633a587c652d02386c4f16f8c6f6aab7352d97f16367c3c40576214372dd628
SHA512

83bafe4c888008afdd1b72c028c7f50dee651ca9e7d8e1b332e0bf3aa1315884155a1458a304f6e5c5627e714bf5a855a8b8d7db3f4eb2bb2789fe2f8f6a1d83

Score

1^/10

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 3080 wrote to memory of 844	3080	msedge.exe	86
PID 3080 wrote to memory of 844	3080	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\bahs.us.h\ninja\lib\index.html
1⤵
- Suspicious use of WriteProcessMemory
PID:3080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb55b146f8,0x7ffb55b14708,0x7ffb55b14718
  2⤵
  PID:844