050b32129f59d723930d690463cd24921effaf84a5f673e78f9de2282feb474a

Analysis

max time kernel
13s
max time network
14s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
20-09-2024 19:51

Target

050b32129f59d723930d690463cd24921effaf84a5f673e78f9de2282feb474a.exe
Size

239KB
MD5

3a28c8e2aa4546bc7a113ec02b5811ae
SHA1

bdcefe00e4af5dae38119b67a758d2abb2c775b2
SHA256

050b32129f59d723930d690463cd24921effaf84a5f673e78f9de2282feb474a
SHA512

d982691bb0d209252bf8aa43707b9bcb09166ff8d3e71af04fe7f19775e5f58f5587a03341098d21d2235498b6a2db6da93c9b52ae2a36f032388d78066ad420
SSDEEP

3072:hsXRmUIMitiMQose27vc+Eld+xZp2vPRL1tT06zJoxAWBcKpSP//dwR1l9B4hT5:GR5IuMQoseGk7RZBGxAycKpSPX2pUr

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2244 wrote to memory of 2104	2244	050b32129f59d723930d690463cd24921effaf84a5f673e78f9de2282feb474a.exe	30
PID 2244 wrote to memory of 2104	2244	050b32129f59d723930d690463cd24921effaf84a5f673e78f9de2282feb474a.exe	30
PID 2244 wrote to memory of 2104	2244	050b32129f59d723930d690463cd24921effaf84a5f673e78f9de2282feb474a.exe	30

C:\Users\Admin\AppData\Local\Temp\050b32129f59d723930d690463cd24921effaf84a5f673e78f9de2282feb474a.exe
"C:\Users\Admin\AppData\Local\Temp\050b32129f59d723930d690463cd24921effaf84a5f673e78f9de2282feb474a.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2244
- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\dw20.exe
  dw20.exe -x -s 460
  2⤵
  PID:2104

memory/2104-4-0x00000000004F0000-0x00000000004F1000-memory.dmp

Filesize
4KB

Download
memory/2104-6-0x00000000004F0000-0x00000000004F1000-memory.dmp

Filesize
4KB

Download
memory/2244-0-0x000007FEF62FE000-0x000007FEF62FF000-memory.dmp

Filesize
4KB

Download
memory/2244-1-0x000007FEF6040000-0x000007FEF69DD000-memory.dmp

Filesize
9.6MB

Download
memory/2244-2-0x000007FEF6040000-0x000007FEF69DD000-memory.dmp

Filesize
9.6MB

Download
memory/2244-3-0x000007FEF6040000-0x000007FEF69DD000-memory.dmp

Filesize
9.6MB

Download
memory/2244-5-0x000007FEF6040000-0x000007FEF69DD000-memory.dmp

Filesize
9.6MB

Download