e8caee715175b8c28fddff66e2e1943968bf28d468c4b639e72fbdb8e753427d

Analysis

max time kernel
121s
max time network
125s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
18-05-2024 14:33

Target

e8caee715175b8c28fddff66e2e1943968bf28d468c4b639e72fbdb8e753427d.exe
Size

315KB
MD5

7c4257430ab801acb952ec95a5a8c233
SHA1

b371e74c2d58975a3845e17118b2b7671347a3ab
SHA256

e8caee715175b8c28fddff66e2e1943968bf28d468c4b639e72fbdb8e753427d
SHA512

1e8087e040fbc4d25bbf9d664d83c0645abe3c81700053d7e1c91bc8bd85d094483f3c1edce9bd2f3f5df62a81ce4316dc71a862b0c35dee86e2d70070db8061
SSDEEP

1536:KtiX3h5hPAjp6uJpE36uJpEqz12t4AtppDNM0eP8DsGiyAEvA0Sz6uJpE5:EiX3qIi0j8RiyAEvAla

Score

1^/10

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

e8caee715175b8c28fddff66e2e1943968bf28d468c4b639e72fbdb8e753427d.exe

description	pid	process	target process
PID 2368 wrote to memory of 1508	2368	e8caee715175b8c28fddff66e2e1943968bf28d468c4b639e72fbdb8e753427d.exe	dw20.exe
PID 2368 wrote to memory of 1508	2368	e8caee715175b8c28fddff66e2e1943968bf28d468c4b639e72fbdb8e753427d.exe	dw20.exe
PID 2368 wrote to memory of 1508	2368	e8caee715175b8c28fddff66e2e1943968bf28d468c4b639e72fbdb8e753427d.exe	dw20.exe
PID 2368 wrote to memory of 1508	2368	e8caee715175b8c28fddff66e2e1943968bf28d468c4b639e72fbdb8e753427d.exe	dw20.exe

C:\Users\Admin\AppData\Local\Temp\e8caee715175b8c28fddff66e2e1943968bf28d468c4b639e72fbdb8e753427d.exe
"C:\Users\Admin\AppData\Local\Temp\e8caee715175b8c28fddff66e2e1943968bf28d468c4b639e72fbdb8e753427d.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2368

C:\Windows\Microsoft.NET\Framework\v2.0.50727\dw20.exe
dw20.exe -x -s 408
2⤵
PID:1508

memory/1508-3-0x0000000000750000-0x0000000000751000-memory.dmp

Filesize
4KB

Download
memory/1508-5-0x0000000000750000-0x0000000000751000-memory.dmp

Filesize
4KB

Download
memory/2368-0-0x0000000074BE1000-0x0000000074BE2000-memory.dmp

Filesize
4KB

Download
memory/2368-1-0x0000000074BE0000-0x000000007518B000-memory.dmp

Filesize
5.7MB

Download
memory/2368-2-0x0000000074BE0000-0x000000007518B000-memory.dmp

Filesize
5.7MB

Download
memory/2368-4-0x0000000074BE0000-0x000000007518B000-memory.dmp

Filesize
5.7MB

Download