5eb21d62086e0fc36c6fa07f1b4cad05c7aed93c8e14ed2412a21c4c63104081

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
24/07/2024, 00:55

Target

5eb21d62086e0fc36c6fa07f1b4cad05c7aed93c8e14ed2412a21c4c63104081.exe
Size

3.8MB
MD5

1afc23aaed6b26c039410da6cd999b5a
SHA1

09b08937fd05b55fb6c062ec5e9039e88a3a7c50
SHA256

5eb21d62086e0fc36c6fa07f1b4cad05c7aed93c8e14ed2412a21c4c63104081
SHA512

1ad084cea69ae01dd76c7bb48fe410d44c0dc6139402f223dff9f7cc60796b12e162f233c1bb01fcbb3678ebfb447b84e50653bc1338ed864675bdc4289a1b57
SSDEEP

49152:4KWSCAXu/AGsqLCzGa2Wj85EG3BjhurPWiH0NlXHlu1ejR5DgXWY8j2:eMXGsqLCzGaMEGfGalX0KR9gS

Score

1^/10

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 4232 wrote to memory of 3116	4232	5eb21d62086e0fc36c6fa07f1b4cad05c7aed93c8e14ed2412a21c4c63104081.exe	85
PID 4232 wrote to memory of 3116	4232	5eb21d62086e0fc36c6fa07f1b4cad05c7aed93c8e14ed2412a21c4c63104081.exe	85

C:\Users\Admin\AppData\Local\Temp\5eb21d62086e0fc36c6fa07f1b4cad05c7aed93c8e14ed2412a21c4c63104081.exe
"C:\Users\Admin\AppData\Local\Temp\5eb21d62086e0fc36c6fa07f1b4cad05c7aed93c8e14ed2412a21c4c63104081.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4232
- C:\Windows\System32\notepad.exe
  "C:\Windows\System32\notepad.exe"
  2⤵
  PID:3116