55a8f5bee292622daa728d6ed7748811ef53ad245a743be8a9f6d4fe1cc4259a

Resubmissions

09/09/2022, 10:18

09/09/2022, 10:15

max time kernel
107s
max time network
110s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
09/09/2022, 10:15

Target

build_220829_123118.exe
Size

2.9MB
MD5

44a559d73098a4eaaf3adeeccf232d48
SHA1

e22fecccddf216e4b8292535bbbf49a16e651114
SHA256

55a8f5bee292622daa728d6ed7748811ef53ad245a743be8a9f6d4fe1cc4259a
SHA512

0a6023342d4c7d821eaf67cd0386bcad1e4baa9074c24ced98c3c9102fc81fd402112a6a8141c0ff5805474c0a21c5b1e50197935288714f737ce3337dc5ae1d
SSDEEP

24576:Y2MRSiYsYx5dbQCM+qlDnJnGK1Pn4kPpAx2Sd0M9WIaLpygYlcf9vJwO5EkloeLT:ERknUPUXaLMDSfnloeLUR8UGl3R

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 4668 set thread context of 150832	4668	build_220829_123118.exe	85

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 4668 wrote to memory of 150832	4668	build_220829_123118.exe	85
PID 4668 wrote to memory of 150832	4668	build_220829_123118.exe	85
PID 4668 wrote to memory of 150832	4668	build_220829_123118.exe	85
PID 4668 wrote to memory of 150832	4668	build_220829_123118.exe	85
PID 4668 wrote to memory of 150832	4668	build_220829_123118.exe	85

C:\Users\Admin\AppData\Local\Temp\build_220829_123118.exe
"C:\Users\Admin\AppData\Local\Temp\build_220829_123118.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:4668
- C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe
  "C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe"
  2⤵
  PID:150832

memory/4668-141-0x0000000000400000-0x00000000005E1000-memory.dmp

Filesize
1.9MB

Download
memory/150832-133-0x0000000000750000-0x00000000007F2000-memory.dmp

Filesize
648KB

Download
memory/150832-140-0x0000000000750000-0x00000000007F2000-memory.dmp

Filesize
648KB

Download