8b9ba220777e0c5e15d4e8580273d10b616ac90a444c3c34004f7070d35cd8fb

Analysis

max time kernel
148s
max time network
140s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/07/2026, 17:29

Target
cube-cmsis-scanner.exe
Size 6.7MB
Sample260720-v2x6msbt2t
SHA256 8b9ba220777e0c5e15d4e8580273d10b616ac90a444c3c34004f7070d35cd8fb
MD5 ac7405d733b9981b892de4f7fb392ecc
SHA1 c0c1341abd92c867b281cc691162db79759365d7
SHA512 e0fa503ceb9ab11e366f407e748edd8be3fa6604b543eb0e9975fe75003a2947cede93825e5a445d13d49afb9151bc6aaa5f6c44f25b5f5a1dca87978d75a8f0
SSDEEP 98304:TJGpjxOi7rhpfCtyScDlCejSvo8UU38kaaGp3cY+JuH9Y:q1Ce1p33+8Hy
TLSH
T16F663903F69691ECC1AAC178835A6232F776B8C945307EBF67A08B312E65F505F1DB18
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 2652 wrote to memory of 3300	2652	cube-cmsis-scanner.exe	90

C:\Users\Admin\AppData\Local\Temp\cube-cmsis-scanner.exe
"C:\Users\Admin\AppData\Local\Temp\cube-cmsis-scanner.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2652
- C:\Users\Admin\AppData\Local\Temp\cube-cmsis-scanner.exe
  "C:\Users\Admin\AppData\Local\Temp\cube-cmsis-scanner.exe" --launch-service
  2⤵
  PID:3300

memory/2652-0-0x00007FF7F7AA0000-0x00007FF7F815B000-memory.dmp

Download

memory/3300-1-0x00007FF7F7AA0000-0x00007FF7F815B000-memory.dmp

Download