172b929bfe52afd0d081d53ffc80794182a9f847ee592aa98596b407071290ba

Analysis

max time kernel
146s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
22/07/2024, 10:15

Target

video_editor_x64.exe
Size

115.9MB
MD5

d75d43dfafcf205b58e58c4246fa1c5e
SHA1

2be837c1f51acc8df691e16718bbabf86d540e4e
SHA256

172b929bfe52afd0d081d53ffc80794182a9f847ee592aa98596b407071290ba
SHA512

c3626ae20c9cd3f2f2925e2a289d86b35dea1a63bd5e9c85ff34c5fa444303de87692e7a6382bdcfb86ad6404f1e8681af2ce0993e3c79a5b1340f2b85f7f9b7
SSDEEP

1572864:q2jCC8z87Jw5P1iZig45roXcWPcypH3L3cD0OqbbamxZnmumEsy53v:qHYi5P1iZuoBpH3LMDEZnmumEsW3v

Score

4^/10

Executes dropped EXE 1 IoCs

pid	Process
5048	video_editor_x64.tmp

Loads dropped DLL 1 IoCs

pid	Process
5048	video_editor_x64.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3264 wrote to memory of 5048	3264	video_editor_x64.exe	87
PID 3264 wrote to memory of 5048	3264	video_editor_x64.exe	87
PID 3264 wrote to memory of 5048	3264	video_editor_x64.exe	87

C:\Users\Admin\AppData\Local\Temp\video_editor_x64.exe
"C:\Users\Admin\AppData\Local\Temp\video_editor_x64.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3264
- C:\Users\Admin\AppData\Local\Temp\is-NAPL8.tmp\video_editor_x64.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-NAPL8.tmp\video_editor_x64.tmp" /SL5="$601DE,120593237,832512,C:\Users\Admin\AppData\Local\Temp\video_editor_x64.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:5048

C:\Users\Admin\AppData\Local\Temp\is-8JEUE.tmp\_isetup\_iscrypt.dll

Filesize
2KB

MD5
a69559718ab506675e907fe49deb71e9

SHA1
bc8f404ffdb1960b50c12ff9413c893b56f2e36f

SHA256
2f6294f9aa09f59a574b5dcd33be54e16b39377984f3d5658cda44950fa0f8fc

SHA512
e52e0aa7fe3f79e36330c455d944653d449ba05b2f9abee0914a0910c3452cfa679a40441f9ac696b3ccf9445cbb85095747e86153402fc362bb30ac08249a63

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-NAPL8.tmp\video_editor_x64.tmp

Filesize
3.1MB

MD5
6c0fc539b631ec1b0d230191c121692a

SHA1
e7efd323b40c9bdf5bd5797def9daa0eacb763f7

SHA256
aa66ccaa90328fda8662e54f64337db9f3b07072a4316aa929121c8865b488f1

SHA512
3d5830e20e7dd37be62ac3a154c393029c52c8fbaee8952fb4e1b50e75a178fd4ddd85649b8a110edb097757174dcfb0dba48590c7be06c1f0d55bd65c909c8a

Download Submit
memory/3264-1-0x0000000000400000-0x00000000004D8000-memory.dmp

Filesize
864KB

Download
memory/3264-2-0x0000000000401000-0x00000000004B7000-memory.dmp

Filesize
728KB

Download
memory/3264-11-0x0000000000400000-0x00000000004D8000-memory.dmp

Filesize
864KB

Download
memory/5048-6-0x0000000000400000-0x000000000071C000-memory.dmp

Filesize
3.1MB

Download
memory/5048-12-0x0000000000400000-0x000000000071C000-memory.dmp

Filesize
3.1MB

Download