6d97c15a1e99e01789dfc735e6c57abeacc1a67d9dd3acfb2c2ca1e94e0fe74d

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
26-06-2024 00:44

Target

6d97c15a1e99e01789dfc735e6c57abeacc1a67d9dd3acfb2c2ca1e94e0fe74d.exe
Size

72KB
MD5

2df73b76a8bbd11b1ce3f2e39e53a0fb
SHA1

277d9541972a683941393d5d16a6624628224233
SHA256

6d97c15a1e99e01789dfc735e6c57abeacc1a67d9dd3acfb2c2ca1e94e0fe74d
SHA512

9d6a3bc0057a275f58dc894fdcf7c55840b50963c97fb242330ead4f19f238af55ad9bd9f85e5f889272b313049525bc7d444cee59b3eaf481fdf9a9d737ee46
SSDEEP

768:eKYAl4YDTgFctbEGu4Q3lEn2Tnw4c+65EF5d/oDqM9AKkeBxmHBYEb:NYhYBtbXu4I+j44EF/guM9AH6eBYEb

Score

1^/10

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2924 wrote to memory of 2944	2924	6d97c15a1e99e01789dfc735e6c57abeacc1a67d9dd3acfb2c2ca1e94e0fe74d.exe	28
PID 2924 wrote to memory of 2944	2924	6d97c15a1e99e01789dfc735e6c57abeacc1a67d9dd3acfb2c2ca1e94e0fe74d.exe	28
PID 2924 wrote to memory of 2944	2924	6d97c15a1e99e01789dfc735e6c57abeacc1a67d9dd3acfb2c2ca1e94e0fe74d.exe	28
PID 2924 wrote to memory of 2944	2924	6d97c15a1e99e01789dfc735e6c57abeacc1a67d9dd3acfb2c2ca1e94e0fe74d.exe	28

C:\Users\Admin\AppData\Local\Temp\6d97c15a1e99e01789dfc735e6c57abeacc1a67d9dd3acfb2c2ca1e94e0fe74d.exe
"C:\Users\Admin\AppData\Local\Temp\6d97c15a1e99e01789dfc735e6c57abeacc1a67d9dd3acfb2c2ca1e94e0fe74d.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2924
- C:\Windows\Microsoft.NET\Framework\v2.0.50727\dw20.exe
  dw20.exe -x -s 408
  2⤵
  PID:2944

memory/2924-0-0x00000000745B1000-0x00000000745B2000-memory.dmp

Filesize
4KB

Download
memory/2924-1-0x00000000745B0000-0x0000000074B5B000-memory.dmp

Filesize
5.7MB

Download
memory/2924-2-0x00000000745B0000-0x0000000074B5B000-memory.dmp

Filesize
5.7MB

Download
memory/2924-4-0x00000000745B0000-0x0000000074B5B000-memory.dmp

Filesize
5.7MB

Download
memory/2944-3-0x0000000000580000-0x0000000000581000-memory.dmp

Filesize
4KB

Download
memory/2944-5-0x0000000000580000-0x0000000000581000-memory.dmp

Filesize
4KB

Download