5e4bbf19a6e055cc6c2c98ef38288f3465c30e25542b735fbfca921fdb8b95f9 | Triage

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-en-20211208
submitted
24-01-2022 19:38

Sharing

Report Analysis Logs

General

Target

5E4BBF19A6E055CC6C2C98EF38288F3465C30E25542B7.exe
Size

486KB
MD5

32cc876191795965e3d5f80cfa90ab3d
SHA1

91eb8879cc44f8361454eb89756fc902e73c3cb1
SHA256

5e4bbf19a6e055cc6c2c98ef38288f3465c30e25542b735fbfca921fdb8b95f9
SHA512

e5f369587c4980bd7aa8590921743f8894777883fec485b2cb726c905d21cf9f4639a2498f2d57520c4eb771b032f4c6882b3679a1af1ce5fd0dacd6c42edb82

Score

5^/10

Malware Config

Signatures

Suspicious use of SetThreadContext 1 IoCs

Processes:

5E4BBF19A6E055CC6C2C98EF38288F3465C30E25542B7.exe

description pid process

PID 1692 set thread context of 0 1692 5E4BBF19A6E055CC6C2C98EF38288F3465C30E25542B7.exe

C:\Users\Admin\AppData\Local\Temp\5E4BBF19A6E055CC6C2C98EF38288F3465C30E25542B7.exe
"C:\Users\Admin\AppData\Local\Temp\5E4BBF19A6E055CC6C2C98EF38288F3465C30E25542B7.exe"
1⤵
- Suspicious use of SetThreadContext
PID:1692

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/0-55-0x0000000140000000-0x0000000140062000-memory.dmp

Filesize
392KB

Download
memory/1692-54-0x000000013FC50000-0x000000013FCCE000-memory.dmp

Filesize
504KB

Download