546655516244eb1e19993e3e8675a33f5a027bbea44875b04ccc40f4a34bdad0

Analysis

max time kernel
148s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/07/2026, 00:56

Target
546655516244eb1e19993e3e8675a33f5a027bbea44875b04ccc40f4a34bdad0.exe
Size 140KB
Sample260729-babzjsdp21
SHA256 546655516244eb1e19993e3e8675a33f5a027bbea44875b04ccc40f4a34bdad0
MD5 c080ad191ae1f3b5abcdd0d3f60ec68f
SHA1 372206dc342efcf7da38531c1fc6faf4989b0a1c
SHA512 1db629a6ed7c0b6e7f7edbce112b2ca49635b06a52195a1e4c4a21ea10e0e75783e770c1d06c76ea10dbb760907319b9c7cefdfa3d70ffd0e4c6beeee30ff1ad
SSDEEP 3072:5aSa2o35o37o3K0ToH4C/o3vo3zo34C/o39o3VXko3ENAto35o3Lrpo35jo3t+Mp:5fNA
TLSH
T137E38C6167FE4119F1F77A78A93516200A7FBD51AB78C6DE029E029D0B73AC08D74B23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 2952 wrote to memory of 5656	2952	546655516244eb1e19993e3e8675a33f5a027bbea44875b04ccc40f4a34bdad0.exe	90

C:\Users\Admin\AppData\Local\Temp\546655516244eb1e19993e3e8675a33f5a027bbea44875b04ccc40f4a34bdad0.exe
"C:\Users\Admin\AppData\Local\Temp\546655516244eb1e19993e3e8675a33f5a027bbea44875b04ccc40f4a34bdad0.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2952
- C:\Windows\system32\cmd.exe
  "C:\Windows\system32\cmd.exe"
  2⤵
  PID:5656