f5d24735d4088941af29355e23670160254ae2580afba7c7b7947f01bf48446e

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
07/06/2024, 07:10

Target

f5d24735d4088941af29355e23670160254ae2580afba7c7b7947f01bf48446e.exe
Size

13KB
MD5

1f1fc4d3becc8de44b2707ba77065ba6
SHA1

4bce1c55cf336c3fe8604918fef90c17d3996a19
SHA256

f5d24735d4088941af29355e23670160254ae2580afba7c7b7947f01bf48446e
SHA512

b64f34bd3f7a715490d9025e424d7d0d69b025197b466ef98680ff2ced017e70ae7e2ac669a97dd08eff0637f13af7620d2f5beedddb474381534fabbc8ccd96
SSDEEP

192:k4XI16weexBZW6OixeSZ7P7I6NG6m3J0PwHlgjZUldYUKj4GisPpWlJdxqHp71x:9WxrnVqtFH8Y843wWlJj+b

Score

8^/10

Executes dropped EXE 1 IoCs

pid	Process
1276	242607071022328.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1412 wrote to memory of 2796	1412	f5d24735d4088941af29355e23670160254ae2580afba7c7b7947f01bf48446e.exe	90
PID 1412 wrote to memory of 2796	1412	f5d24735d4088941af29355e23670160254ae2580afba7c7b7947f01bf48446e.exe	90
PID 2796 wrote to memory of 1276	2796	cmd.exe	91
PID 2796 wrote to memory of 1276	2796	cmd.exe	91

C:\Users\Admin\AppData\Local\Temp\f5d24735d4088941af29355e23670160254ae2580afba7c7b7947f01bf48446e.exe
"C:\Users\Admin\AppData\Local\Temp\f5d24735d4088941af29355e23670160254ae2580afba7c7b7947f01bf48446e.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1412
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\242607071022328.exe 000001
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2796
- - C:\Users\Admin\AppData\Local\Temp\242607071022328.exe
    C:\Users\Admin\AppData\Local\Temp\242607071022328.exe 000001
    3⤵
    - Executes dropped EXE
    PID:1276

C:\Users\Admin\AppData\Local\Temp\242607071022328.exe

Filesize
13KB

MD5
743a6e159e1b5734563c9d0cc6dacb8c

SHA1
d63961ac829fb63bd503bf8384d235b6b0125c0d

SHA256
993d8af394a27911843add51edd5d8a2667ee1b6161f26a2576832fa46abdbde

SHA512
2f49bebb178f423d659aba91b204f2291042288cc95376587f4d4591358f05c7f548e957c9b66ef693398fe930872e39bef9b622b3128fd70aa5e5486e163903

Download Submit