50b6828abaa487cddb055699b82fc20b790d35f6b814ae4fc6658126d5f6ec9d

Analysis

max time kernel
150s
max time network
123s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/07/2026, 08:09

Target
50b6828abaa487cddb055699b82fc20b790d35f6b814ae4fc6658126d5f6ec9d.exe
Size 11KB
Sample260706-j16kvaby8y
SHA256 50b6828abaa487cddb055699b82fc20b790d35f6b814ae4fc6658126d5f6ec9d
MD5 d04ba8863cf4db754d0600eb972d59f2
SHA1 642597b342184a6bacdeb0bc53921b2729fc6017
SHA512 a09807ceae5f6a6f595ee1437c6cb1bc154753ad4da9350dc310c8915988d51d58795dae2c658eb97de3eb7d6b1e00e06c92ab2f0279e4ea151af6c9b893ebef
SSDEEP 192:ITQoCQeFlJLhWea8EyiI843Q5tfHrhoiD:zoCQwl7kw3f0
TLSH
T1B232284BEFA588FADB2A4239C57B0A4EE0757720A71363CB0739C9192E617E130512CD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 2236 wrote to memory of 1876	2236	50b6828abaa487cddb055699b82fc20b790d35f6b814ae4fc6658126d5f6ec9d.exe	89

C:\Users\Admin\AppData\Local\Temp\50b6828abaa487cddb055699b82fc20b790d35f6b814ae4fc6658126d5f6ec9d.exe
"C:\Users\Admin\AppData\Local\Temp\50b6828abaa487cddb055699b82fc20b790d35f6b814ae4fc6658126d5f6ec9d.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2236
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\28525.tm
  2⤵
  PID:1876