e23b0bfea64c599631b62c259a922b34bf51d356811e531cd69fdd3b7fd0a47d

Analysis

max time kernel
148s
max time network
113s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/07/2026, 17:51

Target
e23b0bfea64c599631b62c259a922b34bf51d356811e531cd69fdd3b7fd0a47d.exe
Size 81KB
Sample260714-wfhphacw91
SHA256 e23b0bfea64c599631b62c259a922b34bf51d356811e531cd69fdd3b7fd0a47d
MD5 41223432f82c6b8db6677314c74f2ed4
SHA1 b7eb69dc5d4a926416f14b6c1b914e8d4fc7714a
SHA512 b4d48357a379c375aed48a6a177a51d2cf96703690c5e2b7a5acb828ac5a8d1d5ef1ae4a40bcaf544586adfb032c0d0541dccc5051b18399553d08dd9f15a521
SSDEEP 1536:UBEi2N3P6JhN9+gHxYvuqLfqPAGBF85s7WNJN1xkl4LPn:UGi2kJH9lxYvuqLiPRFH/4Ln
TLSH
T18F83E6D47BD91CD9EA15623C45E693326A3CF9E08A134B5B6630FA321E13FC03DD661A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings	calc.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 1464 wrote to memory of 4804	1464	e23b0bfea64c599631b62c259a922b34bf51d356811e531cd69fdd3b7fd0a47d.exe	88
PID 4804 wrote to memory of 936	4804	calc.exe	89

C:\Users\Admin\AppData\Local\Temp\e23b0bfea64c599631b62c259a922b34bf51d356811e531cd69fdd3b7fd0a47d.exe
"C:\Users\Admin\AppData\Local\Temp\e23b0bfea64c599631b62c259a922b34bf51d356811e531cd69fdd3b7fd0a47d.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1464
- C:\Windows\SYSTEM32\calc.exe
  calc.exe
  2⤵
  - Modifies registry class
  - Suspicious use of WriteProcessMemory
  PID:4804
- - C:\Windows\System32\win32calc.exe
    "C:\Windows\System32\win32calc.exe"
    3⤵
    PID:936

memory/1464-0-0x00000253D2B00000-0x00000253D2B01000-memory.dmp

Download

memory/1464-1-0x00007FF783100000-0x00007FF783119000-memory.dmp

Download