2598eb46152ff73d8fcfe39f852051171078b9b1200ef7c12143338191f1d1f4

Analysis

user interaction
yes
max time kernel
150s
max time network
141s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260706-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/07/2026, 09:43

Target
Demo.mut.exe
Size 162KB
Sample260709-lp174af16l
SHA256 2598eb46152ff73d8fcfe39f852051171078b9b1200ef7c12143338191f1d1f4
MD5 1506b8a07bf51c826e652a9a6d3dac95
SHA1 e8da0a2a47b8a290c867c7a212fd63cf0e9d22d5
SHA512 82906a28ad330053a16a8ee0cc229dd97ec6a72d61633cd22b7fea3decf948d44e6d9754802656e1a1c094e3b8c92ab9564cdf7f27e0014d82fbcb6f228fe3b8
SSDEEP 3072:M01nWkBhLSB280G3+JWSefL2MyQZMSvnjmRXOsOKGFsGnBDxKrKu:/WUhpG3FHeSvKRXOL/BNtu
TLSH
T168F3D6102FCD01A5D5EF7B76D8D85252E2ABFC280E50E9BF35B225BDF43408A8589B35
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 2976 wrote to memory of 2776	2976	Demo.mut.exe	89

C:\Users\Admin\AppData\Local\Temp\Demo.mut.exe
"C:\Users\Admin\AppData\Local\Temp\Demo.mut.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2976
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c pause
  2⤵
  PID:2776