46264d299f00bb0f25f7d8da4048c7eea82e6ffb19937a40e95766d81b081a7d

General

Target

46264d299f00bb0f25f7d8da4048c7eea82e6ffb19937a40e95766d81b081a7d.exe
Size

101KB
MD5

0c0b50f4c37773f91303ac27ef81336b
SHA1

6c80ab2ca74b8df9f7f7cf120fa8b8646d3b44ec
SHA256

46264d299f00bb0f25f7d8da4048c7eea82e6ffb19937a40e95766d81b081a7d
SHA512

57429d28cc2a6e522e7c4b542863338714f3a5635775f27a14e825ad488be42bd4132ba90fbf5440f6b86d915519a320283b8c21fc311b8037264205f9ac5602

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2020 set thread context of 1752	2020	46264d299f00bb0f25f7d8da4048c7eea82e6ffb19937a40e95766d81b081a7d.exe	27

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1752	46264d299f00bb0f25f7d8da4048c7eea82e6ffb19937a40e95766d81b081a7d.exe
1752	46264d299f00bb0f25f7d8da4048c7eea82e6ffb19937a40e95766d81b081a7d.exe
1752	46264d299f00bb0f25f7d8da4048c7eea82e6ffb19937a40e95766d81b081a7d.exe
1752	46264d299f00bb0f25f7d8da4048c7eea82e6ffb19937a40e95766d81b081a7d.exe
1752	46264d299f00bb0f25f7d8da4048c7eea82e6ffb19937a40e95766d81b081a7d.exe
1752	46264d299f00bb0f25f7d8da4048c7eea82e6ffb19937a40e95766d81b081a7d.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2020 wrote to memory of 1752	2020	46264d299f00bb0f25f7d8da4048c7eea82e6ffb19937a40e95766d81b081a7d.exe	27
PID 2020 wrote to memory of 1752	2020	46264d299f00bb0f25f7d8da4048c7eea82e6ffb19937a40e95766d81b081a7d.exe	27
PID 2020 wrote to memory of 1752	2020	46264d299f00bb0f25f7d8da4048c7eea82e6ffb19937a40e95766d81b081a7d.exe	27
PID 2020 wrote to memory of 1752	2020	46264d299f00bb0f25f7d8da4048c7eea82e6ffb19937a40e95766d81b081a7d.exe	27
PID 2020 wrote to memory of 1752	2020	46264d299f00bb0f25f7d8da4048c7eea82e6ffb19937a40e95766d81b081a7d.exe	27
PID 2020 wrote to memory of 1752	2020	46264d299f00bb0f25f7d8da4048c7eea82e6ffb19937a40e95766d81b081a7d.exe	27
PID 2020 wrote to memory of 1752	2020	46264d299f00bb0f25f7d8da4048c7eea82e6ffb19937a40e95766d81b081a7d.exe	27
PID 2020 wrote to memory of 1752	2020	46264d299f00bb0f25f7d8da4048c7eea82e6ffb19937a40e95766d81b081a7d.exe	27
PID 2020 wrote to memory of 1752	2020	46264d299f00bb0f25f7d8da4048c7eea82e6ffb19937a40e95766d81b081a7d.exe	27
PID 2020 wrote to memory of 1752	2020	46264d299f00bb0f25f7d8da4048c7eea82e6ffb19937a40e95766d81b081a7d.exe	27
PID 2020 wrote to memory of 1752	2020	46264d299f00bb0f25f7d8da4048c7eea82e6ffb19937a40e95766d81b081a7d.exe	27

C:\Users\Admin\AppData\Local\Temp\46264d299f00bb0f25f7d8da4048c7eea82e6ffb19937a40e95766d81b081a7d.exe
"C:\Users\Admin\AppData\Local\Temp\46264d299f00bb0f25f7d8da4048c7eea82e6ffb19937a40e95766d81b081a7d.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:2020
- C:\Users\Admin\AppData\Local\Temp\46264d299f00bb0f25f7d8da4048c7eea82e6ffb19937a40e95766d81b081a7d.exe
  "C:\Users\Admin\AppData\Local\Temp\46264d299f00bb0f25f7d8da4048c7eea82e6ffb19937a40e95766d81b081a7d.exe"
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1752

memory/1752-63-0x0000000000400000-0x000000000040F000-memory.dmp

Filesize
60KB

Download
memory/1752-56-0x0000000000400000-0x000000000040F000-memory.dmp

Filesize
60KB

Download
memory/1752-59-0x0000000000400000-0x000000000040F000-memory.dmp

Filesize
60KB

Download
memory/1752-61-0x0000000000400000-0x000000000040F000-memory.dmp

Filesize
60KB

Download
memory/1752-62-0x0000000000400000-0x000000000040F000-memory.dmp

Filesize
60KB

Download
memory/1752-64-0x0000000000400000-0x000000000040F000-memory.dmp

Filesize
60KB

Download
memory/1752-68-0x0000000000400000-0x000000000040F000-memory.dmp

Filesize
60KB

Download
memory/1752-67-0x0000000000400000-0x000000000040F000-memory.dmp

Filesize
60KB

Download
memory/1752-69-0x0000000000400000-0x000000000040F000-memory.dmp

Filesize
60KB

Download
memory/2020-55-0x00000000759F1000-0x00000000759F3000-memory.dmp

Filesize
8KB

Download
memory/2020-54-0x0000000000400000-0x000000000041C000-memory.dmp

Filesize
112KB

Download
memory/2020-66-0x0000000000400000-0x000000000041C000-memory.dmp

Filesize
112KB

Download