f30f46a84c52f2cb1391e3edb66fb88bca4592a70096fd5d90333c32f99b6c0c

Analysis

max time kernel
149s
max time network
93s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
28/04/2026, 14:33

Target
AssetReuploader.exe
Size 6.7MB
Sample260428-rw3bmaay21
SHA256 f30f46a84c52f2cb1391e3edb66fb88bca4592a70096fd5d90333c32f99b6c0c
MD5 d4045f28d285e5ed31cdde9f550021ab
SHA1 3d614efe58735ba13a8188c4c172bb09f7c0b5c4
SHA512 191442d810e2024b6a8263a999a7edd2077dd1b99c64ab6f356d69db94246f968b5714ccbf480409388ccc81800ec7bab51cbf33ad4ba8c93b0ea712cec2952e
SSDEEP 49152:qK2l/gxl0aP04d/UP9cb+2oAxaRwrghzyhT+37/Bbk8qAiTL367sAbj/Vhrt7V3Q:qPaf2wKs+37ZnEGT+jEVDE
TLSH
T11F666C57EC9115E5C0EEE23586229253BA75BC895F3123D73B90F3282F72BD0AA79710
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 3352 wrote to memory of 1160	3352	AssetReuploader.exe	81
PID 3352 wrote to memory of 432	3352	AssetReuploader.exe	82

C:\Users\Admin\AppData\Local\Temp\AssetReuploader.exe
"C:\Users\Admin\AppData\Local\Temp\AssetReuploader.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3352
- C:\Windows\system32\cmd.exe
  cmd /c cls
  2⤵
  PID:1160
- C:\Windows\system32\cmd.exe
  cmd /c cls
  2⤵
  PID:432