b7b573a5f6607dc3860aa12079e28e991a649396ecdc7ab7048f08ce45c92fbf

Analysis

max time kernel
22s
max time network
16s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
20/09/2024, 19:45

Target

b7b573a5f6607dc3860aa12079e28e991a649396ecdc7ab7048f08ce45c92fbf.exe
Size

239KB
MD5

801703cab4bc085aec4abda3595f4d40
SHA1

7d9db01a7825971de68c64d9cc45e46ba10c85e4
SHA256

b7b573a5f6607dc3860aa12079e28e991a649396ecdc7ab7048f08ce45c92fbf
SHA512

0be1c562dbc2ba930f56341c3f1f6f7db1f0029735cc79719fdbea84cb1afda15f62c49829a96113b0d099320b593de02d022afb0cc6d1cf782333909aaba8a3
SSDEEP

3072:hsXRmUIMitiMQose27vc+Eld+xZp2vPRL1tT06zJoxAWBcKpSP//dwR1l9B4hTu:GR5IuMQoseGk7RZBGxAycKpSPX2pUE

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2472 wrote to memory of 2808	2472	b7b573a5f6607dc3860aa12079e28e991a649396ecdc7ab7048f08ce45c92fbf.exe	30
PID 2472 wrote to memory of 2808	2472	b7b573a5f6607dc3860aa12079e28e991a649396ecdc7ab7048f08ce45c92fbf.exe	30
PID 2472 wrote to memory of 2808	2472	b7b573a5f6607dc3860aa12079e28e991a649396ecdc7ab7048f08ce45c92fbf.exe	30

C:\Users\Admin\AppData\Local\Temp\b7b573a5f6607dc3860aa12079e28e991a649396ecdc7ab7048f08ce45c92fbf.exe
"C:\Users\Admin\AppData\Local\Temp\b7b573a5f6607dc3860aa12079e28e991a649396ecdc7ab7048f08ce45c92fbf.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2472
- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\dw20.exe
  dw20.exe -x -s 456
  2⤵
  PID:2808

memory/2472-0-0x000007FEF574E000-0x000007FEF574F000-memory.dmp

Filesize
4KB

Download
memory/2472-1-0x000007FEF5490000-0x000007FEF5E2D000-memory.dmp

Filesize
9.6MB

Download
memory/2472-2-0x000007FEF5490000-0x000007FEF5E2D000-memory.dmp

Filesize
9.6MB

Download
memory/2472-3-0x000007FEF5490000-0x000007FEF5E2D000-memory.dmp

Filesize
9.6MB

Download
memory/2472-5-0x000007FEF5490000-0x000007FEF5E2D000-memory.dmp

Filesize
9.6MB

Download
memory/2808-4-0x00000000005F0000-0x00000000005F1000-memory.dmp

Filesize
4KB

Download