6ff1f8722526e31318b62718b4a36aa88cc9ea4d7c436f11efe889949c07c27b

Analysis

max time kernel
93s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
05/08/2024, 07:54

Target

6ff1f8722526e31318b62718b4a36aa88cc9ea4d7c436f11efe889949c07c27b.exe
Size

24KB
MD5

689b332e1e8596d5c57f4e88193df4c7
SHA1

d6bcc7105ddfad67fc7ee4b9d43df12f2128a4d1
SHA256

6ff1f8722526e31318b62718b4a36aa88cc9ea4d7c436f11efe889949c07c27b
SHA512

77546a99809714ab2c1939ddb999c4219c855097fdda505592dcfaeebf69ee8d6b22707314b5db06b2b29b782be5fe7831ccc4c4985d3afe6aafb5136c6e9753
SSDEEP

384:pX9/w0G+p/NK/pTnP5NTLeXp5bAnXhKsY+wVpSr0Z8JC3df7:Z9/rLNC7PWvcnwsrw/Sox3x7

Score

1^/10

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 4932 wrote to memory of 1032	4932	6ff1f8722526e31318b62718b4a36aa88cc9ea4d7c436f11efe889949c07c27b.exe	87
PID 4932 wrote to memory of 1032	4932	6ff1f8722526e31318b62718b4a36aa88cc9ea4d7c436f11efe889949c07c27b.exe	87

C:\Users\Admin\AppData\Local\Temp\6ff1f8722526e31318b62718b4a36aa88cc9ea4d7c436f11efe889949c07c27b.exe
"C:\Users\Admin\AppData\Local\Temp\6ff1f8722526e31318b62718b4a36aa88cc9ea4d7c436f11efe889949c07c27b.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4932
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c pause
  2⤵
  PID:1032