5cc7c197fa1b959fb735d7cc9c985ab2a909a57647aac05260630d68a220e047

Analysis

max time kernel
147s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
14/06/2024, 21:55

Target

5cc7c197fa1b959fb735d7cc9c985ab2a909a57647aac05260630d68a220e047.exe
Size

4.2MB
MD5

9dad841b5965b10ce2116cc033d126ec
SHA1

81f665c1f5bc1a5a62cfeac0e4446d494f524256
SHA256

5cc7c197fa1b959fb735d7cc9c985ab2a909a57647aac05260630d68a220e047
SHA512

65a67b7c49f1a1d2bfb145b052c317212a6e58301fb5dd45c027d8cafd273da47c4c946bbcc70ffc141a8c59d574b8bdee8370907a55a624f7d12b1d7ce18118
SSDEEP

98304:Cmhd1Uryehll6wdVLUjH5oxFbxhVLUjH5oxFbx:Cljl6wdVUjZEdhVUjZEd

Score

7^/10

Deletes itself 1 IoCs

pid	Process
4704	4759.tmp

Executes dropped EXE 1 IoCs

pid	Process
4704	4759.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2344 wrote to memory of 4704	2344	5cc7c197fa1b959fb735d7cc9c985ab2a909a57647aac05260630d68a220e047.exe	85
PID 2344 wrote to memory of 4704	2344	5cc7c197fa1b959fb735d7cc9c985ab2a909a57647aac05260630d68a220e047.exe	85
PID 2344 wrote to memory of 4704	2344	5cc7c197fa1b959fb735d7cc9c985ab2a909a57647aac05260630d68a220e047.exe	85

C:\Users\Admin\AppData\Local\Temp\5cc7c197fa1b959fb735d7cc9c985ab2a909a57647aac05260630d68a220e047.exe
"C:\Users\Admin\AppData\Local\Temp\5cc7c197fa1b959fb735d7cc9c985ab2a909a57647aac05260630d68a220e047.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2344
- C:\Users\Admin\AppData\Local\Temp\4759.tmp
  "C:\Users\Admin\AppData\Local\Temp\4759.tmp" --splashC:\Users\Admin\AppData\Local\Temp\5cc7c197fa1b959fb735d7cc9c985ab2a909a57647aac05260630d68a220e047.exe 95FC0449AA411818AE51900FA5A026DC05E142478EBEE77602B744844E9CE61A56F535BEC1460031669D2DD875D88FFEE5C090C3F4814D3921A8A3DCE4EB5E05
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:4704

C:\Users\Admin\AppData\Local\Temp\4759.tmp

Filesize
4.2MB

MD5
c555df3fdd39a3d23256b31cff9ebb6f

SHA1
e5754d0c546ab419f8db7c9fcb460db2b6d8492c

SHA256
4f71caad1167a96e533a62efdad7c04b95f7e65dd94ea632fce314ac18ecf3f6

SHA512
fc1a2ea653f1d4224b5fa0bfc6be8b8a92a0eb1f8abe964b3f6b5c20ecb9130dfb4e30571cd2fcdc358347793ca60fd10d67d57b1d4bd030e9ee896e6c65dcc4

Download Submit
memory/2344-0-0x0000000000400000-0x0000000000849000-memory.dmp

Filesize
4.3MB

Download
memory/4704-5-0x0000000000400000-0x0000000000849000-memory.dmp

Filesize
4.3MB

Download