0ab0116b34db0e7168dd5c5b1c917bbb1d38235ece4430348f068914b4ab87a6

Analysis

max time kernel
144s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
08/06/2024, 08:57

Target
procexp.exe
Size 4.4MB
Sample240608-kw2xjabe44
SHA256 0ab0116b34db0e7168dd5c5b1c917bbb1d38235ece4430348f068914b4ab87a6
MD5 7289aa6c0f2c41c29c9b33caf1c15779
SHA1 96387ab157168b22111e3c70b22364c9b71639c4
SHA512 f98d4541a31df87e80a8dbce0c783585f9b471a0388bf179b8c3cfaf65366212349b059a17a7b6d1c5704a86c6af5184f0b9c5d99e590a6a1a60dae943300d0b
SSDEEP 49152:Kug+zejoF8v8F/nluLRpSct4whtfVKevv7m9gcQYPbH51a7y58SG:Nzeo80F/nQRMPbjAyKZ
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
4504	procexp64.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 4412 wrote to memory of 4504	4412	procexp.exe	91
PID 4412 wrote to memory of 4504	4412	procexp.exe	91

C:\Users\Admin\AppData\Local\Temp\procexp.exe
"C:\Users\Admin\AppData\Local\Temp\procexp.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4412
- C:\Users\Admin\AppData\Local\Temp\procexp64.exe
  "C:\Users\Admin\AppData\Local\Temp\procexp.exe"
  2⤵
  - Executes dropped EXE
  PID:4504

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1340 --field-trial-handle=2292,i,2103142837140538807,15881446839139365070,262144 --variations-seed-version /prefetch:8
1⤵
PID:4016

procexp64.exe

Path C:\Users\Admin\AppData\Local\Temp\procexp64.exe
Size 2.3MB
SHA256 35bd4e71b67655192a2b5159e7a7303d8332cd81df2842bf2679d92adbf57e25
MD5 a0773a1a0102cfe56855b95b654ff400
SHA1 809fc843f89a49f3a56c8d8552e3fd6d1fa1bebe
SHA512 9ff45c55338300f0f47219732a0252a856f305000f22955f1e6207ec131d8896f7564c621864ecec4228a488e786cad5e1a127230e60f031a83072c988c73d47
SSDEEP 24576:nTVGtcA1xyC4Y3htmnCNVKeB1vc4ZcVsof9gcQPAPtEGH5AQoV6FaTv8:Tct4whtfVKevv7m9gcQYPbH51a78
MD5 SHA1 SHA512 SSDEEP

Submit Download