d2466973a33718320ec5ccd00f83c3f38c97c839f24474a71b826128e9089628

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
07/06/2024, 06:49

Target

d2466973a33718320ec5ccd00f83c3f38c97c839f24474a71b826128e9089628.exe
Size

12KB
MD5

d7ec7d6cecbdabddd9f97d05debee5e5
SHA1

f48cd4ffedaa656075ff6bde1b539ee4107eaabf
SHA256

d2466973a33718320ec5ccd00f83c3f38c97c839f24474a71b826128e9089628
SHA512

c84c0303bed5f08225ab4216eef87ff0e2004266bc99c15539a98b5f13de22d3db0017e38dc446c1bd4f033032cd3580778b12184c85e00becf711cafe39342b
SSDEEP

192:PmCI1ctHToAN684TOh3egBB8zGCaRwP+AvY9NX59GP1uXWlJdxqHE1x:lDHcAzeaRRtSeWlJj+e

Score

8^/10

Executes dropped EXE 1 IoCs

pid	Process
4728	242607065955360.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 3080 wrote to memory of 948	3080	d2466973a33718320ec5ccd00f83c3f38c97c839f24474a71b826128e9089628.exe	97
PID 3080 wrote to memory of 948	3080	d2466973a33718320ec5ccd00f83c3f38c97c839f24474a71b826128e9089628.exe	97
PID 948 wrote to memory of 4728	948	cmd.exe	98
PID 948 wrote to memory of 4728	948	cmd.exe	98

C:\Users\Admin\AppData\Local\Temp\d2466973a33718320ec5ccd00f83c3f38c97c839f24474a71b826128e9089628.exe
"C:\Users\Admin\AppData\Local\Temp\d2466973a33718320ec5ccd00f83c3f38c97c839f24474a71b826128e9089628.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3080
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\242607065955360.exe 000001
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:948
- - C:\Users\Admin\AppData\Local\Temp\242607065955360.exe
    C:\Users\Admin\AppData\Local\Temp\242607065955360.exe 000001
    3⤵
    - Executes dropped EXE
    PID:4728

C:\Users\Admin\AppData\Local\Temp\242607065955360.exe

Filesize
13KB

MD5
fd25dc77dae60493f0bb77cbf7449405

SHA1
7a6efffb10823510e17f701ba5b3e487771fe7fb

SHA256
2a2c2e1dd94a5a62a9e2b49fd408f12461b185398ba44b9b92ac9db89d1d526b

SHA512
331e045832ea899df34e8460a1f42228ee3c24df4729681bda5eafe1608db17a67b00fddb56ce39ec5b37a0d8d77a29536f04895eb0369163d53852bb5d3f138

Download Submit