dd861fca42260ff7b71270793d98321fd91c18d4e7501fa9b2ee689c981c0ad5

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
03/08/2024, 03:59

Target

dd861fca42260ff7b71270793d98321fd91c18d4e7501fa9b2ee689c981c0ad5.exe
Size

223KB
MD5

7b8deec131d6556ae626c3bfbff92270
SHA1

91368d2d20d42b6f7ab08d2fe52904f657839c4e
SHA256

dd861fca42260ff7b71270793d98321fd91c18d4e7501fa9b2ee689c981c0ad5
SHA512

8993e3fb8ca9bf4963caf85aee8ff903df1fb4c17636e24a83b6af1141defe0def73d79c91eae11c8b4edf84fd0546630e92bcdb9177822a796b173bb48a55ba
SSDEEP

3072:osXRmUIMitiMQose27vc+Eld+xZp2vPRL1tT06zJoxAWBcKpSP//dwRmyT:JR5IuMQoseGk7RZBGxAycKpSPX2NT

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2128 wrote to memory of 2760	2128	dd861fca42260ff7b71270793d98321fd91c18d4e7501fa9b2ee689c981c0ad5.exe	30
PID 2128 wrote to memory of 2760	2128	dd861fca42260ff7b71270793d98321fd91c18d4e7501fa9b2ee689c981c0ad5.exe	30
PID 2128 wrote to memory of 2760	2128	dd861fca42260ff7b71270793d98321fd91c18d4e7501fa9b2ee689c981c0ad5.exe	30

C:\Users\Admin\AppData\Local\Temp\dd861fca42260ff7b71270793d98321fd91c18d4e7501fa9b2ee689c981c0ad5.exe
"C:\Users\Admin\AppData\Local\Temp\dd861fca42260ff7b71270793d98321fd91c18d4e7501fa9b2ee689c981c0ad5.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2128
- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\dw20.exe
  dw20.exe -x -s 460
  2⤵
  PID:2760

memory/2128-0-0x000007FEF587E000-0x000007FEF587F000-memory.dmp

Filesize
4KB

Download
memory/2128-1-0x000007FEF55C0000-0x000007FEF5F5D000-memory.dmp

Filesize
9.6MB

Download
memory/2128-2-0x000007FEF55C0000-0x000007FEF5F5D000-memory.dmp

Filesize
9.6MB

Download
memory/2128-3-0x000007FEF55C0000-0x000007FEF5F5D000-memory.dmp

Filesize
9.6MB

Download
memory/2128-5-0x000007FEF55C0000-0x000007FEF5F5D000-memory.dmp

Filesize
9.6MB

Download
memory/2760-4-0x0000000000370000-0x0000000000371000-memory.dmp

Filesize
4KB

Download