61363f656498d492cae671be8070e927d1e790b6008c369425320c3bc90c9178

Analysis

max time kernel
41s
max time network
42s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
29/05/2024, 19:35

Target

L8-Launch.exe
Size

16KB
MD5

ac70102a21b9ec0bd6f0d2042586a524
SHA1

bec66e57cba1477c2ea594670a3aea3af3f9286c
SHA256

61363f656498d492cae671be8070e927d1e790b6008c369425320c3bc90c9178
SHA512

353e3118211321e13b9e172ffb6915fd5fe8e4976e0844ec5301ddcd7d66121d34fe3ef86cea3e6e495716db3a81ddac12ce12189105bfc79fdb359ad11268aa
SSDEEP

192:LR7rJYCoZ3l+kfvJJREqKmFNnNfZfc6+DIf1D514VOpvHvJJ9Eql0fzLgS7wf:LRvJYC6U0vVrD0DEp5TvHvhkgow

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
4132	zE1B5.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3364 wrote to memory of 4132	3364	L8-Launch.exe	91
PID 3364 wrote to memory of 4132	3364	L8-Launch.exe	91
PID 3364 wrote to memory of 4132	3364	L8-Launch.exe	91

C:\Users\Admin\AppData\Local\Temp\L8-Launch.exe
"C:\Users\Admin\AppData\Local\Temp\L8-Launch.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3364
- C:\Users\Admin\AppData\Local\Temp\zE1B5.tmp
  "C:\Users\Admin\AppData\Local\Temp\zE1B5.tmp"
  2⤵
  - Executes dropped EXE
  PID:4132

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=3888,i,13281073920029625837,8253721632651544158,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:8
1⤵
PID:2360

C:\Users\Admin\AppData\Local\Temp\zE1B5.tmp

Filesize
7KB

MD5
3d951066ec1a3d2b7c9570df48cd8d42

SHA1
cf07b026d0ad198661bba6e9cbc3c2e0bf3222a2

SHA256
daf8958d9410cc64123e8d56447a5d35d53c6063fe2db7e1df75f33ca79502d4

SHA512
ad2bb3732c8889ae365124e283f943c25dfd23287100be95bdb554ed37b6ab955db33864777995582df90aaf983fb2dc5f4299c3a51582d377b87fd87d428ebd

Download Submit