a46d902130001a6ab19d70e6c383b519fb36c59e8b770e830be3bafb7b4fa0bc

Analysis

user interaction
yes
max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/06/2026, 10:25

Target
ReverseChallenge.exe
Size 442KB
Sample260622-mgfrvsbv31
SHA256 a46d902130001a6ab19d70e6c383b519fb36c59e8b770e830be3bafb7b4fa0bc
MD5 aaa75e370367a294a1f1e39a505657b1
SHA1 c337185056d010a53f1870d926641d9d7fa83c9e
SHA512 884e36d62465088a7c6e1d20c678390787c563c2ec6887dfb115b813399a1a04298fa019eeb8029a99b477163371f8d908d23f8c8007bafa92c119422deb3dcd
SSDEEP 6144:zL+ex5MU/JjHiRer0rXcMqXdffxms7Pry:za0uAnry
TLSH
T124A42F100985FD0FC3616C79D2E5F75CE9787228FFA94603AE7E059D462FB4CA8A6342
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 3568 wrote to memory of 1416	3568	ReverseChallenge.exe	89

C:\Users\Admin\AppData\Local\Temp\ReverseChallenge.exe
"C:\Users\Admin\AppData\Local\Temp\ReverseChallenge.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3568
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c pause
  2⤵
  PID:1416