c9cd0151fcd74a0f301cd4c5832ab67bd38d08c7ae1faf39463fe380c2766c6a

Analysis

max time kernel
141s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
23/05/2024, 12:03

Target

cpu-z_2.09-cn.exe
Size

2.1MB
MD5

eefe7f1fca5cf46182d5025eaad625d0
SHA1

3fef1b8f17746512c98be35b5e8621916b03c035
SHA256

c9cd0151fcd74a0f301cd4c5832ab67bd38d08c7ae1faf39463fe380c2766c6a
SHA512

044a4624fe5ac2d6f770fafe3fb74b79868cc9c5c1805b475fb9341a244a47b8efcba0fe215ee5261c7017a23b26335dddb3292f398f56655d8f1ab936a322ad
SSDEEP

49152:2yVSwAvN92GM5n/007Rq7+EK3BQmiGeg3YMF2MuQBVSL8SCQzOqGkeVvo:XswyHdi/pC+EKxQI3YC2pQwLuxo

Score

4^/10

Executes dropped EXE 1 IoCs

pid	Process
1496	cpu-z_2.09-cn.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 5076 wrote to memory of 1496	5076	cpu-z_2.09-cn.exe	83
PID 5076 wrote to memory of 1496	5076	cpu-z_2.09-cn.exe	83
PID 5076 wrote to memory of 1496	5076	cpu-z_2.09-cn.exe	83

C:\Users\Admin\AppData\Local\Temp\cpu-z_2.09-cn.exe
"C:\Users\Admin\AppData\Local\Temp\cpu-z_2.09-cn.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5076
- C:\Users\Admin\AppData\Local\Temp\is-AIPFI.tmp\cpu-z_2.09-cn.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-AIPFI.tmp\cpu-z_2.09-cn.tmp" /SL5="$501F2,1954791,58368,C:\Users\Admin\AppData\Local\Temp\cpu-z_2.09-cn.exe"
  2⤵
  - Executes dropped EXE
  PID:1496

C:\Users\Admin\AppData\Local\Temp\is-AIPFI.tmp\cpu-z_2.09-cn.tmp

Filesize
723KB

MD5
05932ed93d1308040544ec4acdeab5d4

SHA1
bd78348bed36927a99b480f4c1ea01a463932f67

SHA256
7e64b7be85dea5b3e6f049a1d9a77f144bbcface20636b10b8b95ead8b4d2004

SHA512
c9cb591e769254f3e153ddcebdc679da57f3db1d82afd38eaaa9f15ac1605e0a8fb29efda71441d24c709c70c11c221bf2d79bc0bfc10416f6df5b1993a9442f

Download Submit
memory/1496-6-0x0000000000400000-0x00000000004BF000-memory.dmp

Filesize
764KB

Download
memory/1496-9-0x0000000000400000-0x00000000004BF000-memory.dmp

Filesize
764KB

Download
memory/5076-0-0x0000000000400000-0x0000000000415000-memory.dmp

Filesize
84KB

Download
memory/5076-1-0x0000000000401000-0x000000000040C000-memory.dmp

Filesize
44KB

Download
memory/5076-8-0x0000000000400000-0x0000000000415000-memory.dmp

Filesize
84KB

Download