fb52c6823d695304b9ed38fef92700938379a6b7636944d24303a6bcb227df46

Analysis

max time kernel
131s
max time network
133s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
06/07/2024, 05:06

Target

fb52c6823d695304b9ed38fef92700938379a6b7636944d24303a6bcb227df46.exe
Size

7KB
MD5

562f9e8dc5baa7236d73a0b5f514d49d
SHA1

ff46cb46abc1e2372307d2908d015ebc93c5dbb4
SHA256

fb52c6823d695304b9ed38fef92700938379a6b7636944d24303a6bcb227df46
SHA512

a7fe4e8e609774f4eb3e968c177cd2c0785744d7969f5d25904f067a23112b46385c061dbb606332c68c09ab733d36509f39a9d54e4ed2643c6f43faab7aee5f
SSDEEP

24:eFGStrJ9u0/6Rcm4nZd0BQAVw8Jd2HeZvgOMrXabVx6/oAhbgb1511pmB:is0kM0BQZ8Jd2Hedrb8C5SB

Score

1^/10

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 1900 wrote to memory of 2704	1900	fb52c6823d695304b9ed38fef92700938379a6b7636944d24303a6bcb227df46.exe	93
PID 1900 wrote to memory of 2704	1900	fb52c6823d695304b9ed38fef92700938379a6b7636944d24303a6bcb227df46.exe	93

C:\Users\Admin\AppData\Local\Temp\fb52c6823d695304b9ed38fef92700938379a6b7636944d24303a6bcb227df46.exe
"C:\Users\Admin\AppData\Local\Temp\fb52c6823d695304b9ed38fef92700938379a6b7636944d24303a6bcb227df46.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1900
- C:\Windows\SYSTEM32\cmd.exe
  cmd
  2⤵
  PID:2704

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4376,i,3027467512973953085,11878940668304988630,262144 --variations-seed-version --mojo-platform-channel-handle=4060 /prefetch:8
1⤵
PID:2768

memory/1900-0-0x0000000140000000-0x0000000140004270-memory.dmp

Filesize
16KB

Download