32fec5f5a1e77d6fdb8b27016d70c923429b9530459850d8207c925e563dfe09

Resubmissions

07/07/2024, 14:13

07/07/2024, 14:11

max time kernel
141s
max time network
98s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
07/07/2024, 14:11

Target

setup_lossless_scaling_2.9.0.exe
Size

5.9MB
MD5

3f484fb41e85aa1875ab0e966a13fbff
SHA1

f2591e8c9e46520a10cbfbb4f80fa0cff1722701
SHA256

32fec5f5a1e77d6fdb8b27016d70c923429b9530459850d8207c925e563dfe09
SHA512

d761369016596a51a3a8c2ee8364f0608771e05c95517ac256126eb74a77ef5ff87e39949d33ce0c7b046ad7f642d6354513968842035e6206a974e8eca54b8d
SSDEEP

49152:kBuZrEUNBUJiQXPfoYV7hZiRZieAlA89hAnqQQDI7QPmJLJZ2iZ3vxm3c7ldk:6kLNAXXoYTZblA89hAqQsOQPCXvm3chG

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
3840	setup_lossless_scaling_2.9.0.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 552 wrote to memory of 3840	552	setup_lossless_scaling_2.9.0.exe	84
PID 552 wrote to memory of 3840	552	setup_lossless_scaling_2.9.0.exe	84
PID 552 wrote to memory of 3840	552	setup_lossless_scaling_2.9.0.exe	84

C:\Users\Admin\AppData\Local\Temp\setup_lossless_scaling_2.9.0.exe
"C:\Users\Admin\AppData\Local\Temp\setup_lossless_scaling_2.9.0.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:552
- C:\Users\Admin\AppData\Local\Temp\is-5T46K.tmp\setup_lossless_scaling_2.9.0.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-5T46K.tmp\setup_lossless_scaling_2.9.0.tmp" /SL5="$60060,5281693,844288,C:\Users\Admin\AppData\Local\Temp\setup_lossless_scaling_2.9.0.exe"
  2⤵
  - Executes dropped EXE
  PID:3840

C:\Users\Admin\AppData\Local\Temp\is-5T46K.tmp\setup_lossless_scaling_2.9.0.tmp

Filesize
3.0MB

MD5
d7b514bf909e1e4d0f26a0595d3354ec

SHA1
88fd37a48fadb910a3a96d0e8c0b5ef559ab210d

SHA256
4e1ed66e3aa81ae7e561324d504088482c73f97fa2c0bccd59e83512b78b1259

SHA512
997bb2d23c217e1f7b589bd4440b26177a6d061b3406892368c5527f569283b56db0f6d48cb74f9a00c534ede50d05e19268e2b04fc28ec33cf5c5dcc87eb9de

Download Submit
memory/552-0-0x0000000000400000-0x00000000004DB000-memory.dmp

Filesize
876KB

Download
memory/552-2-0x0000000000401000-0x00000000004B7000-memory.dmp

Filesize
728KB

Download
memory/552-8-0x0000000000400000-0x00000000004DB000-memory.dmp

Filesize
876KB

Download
memory/3840-6-0x0000000000400000-0x0000000000717000-memory.dmp

Filesize
3.1MB

Download
memory/3840-9-0x0000000000400000-0x0000000000717000-memory.dmp

Filesize
3.1MB

Download