dd7835ea255cec3f517487a1196fc409dccaae106fed12c3de8f726fb5e6bb47

Analysis

max time kernel
75s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
10/09/2022, 06:12

Target
4f22b8be8772f78fbde4e55ef54c0ce5.exe
Size 273KB
Sample220910-gx614adddj
SHA256 dd7835ea255cec3f517487a1196fc409dccaae106fed12c3de8f726fb5e6bb47
MD5 4f22b8be8772f78fbde4e55ef54c0ce5
SHA1 800c135eba3ea0ebfa717e4e4d097d7be871bdb5
SHA512 912dd61a496f028165e7833c658e50146c7bc83f0cf2e2555af19580fa173033b54bcf90101897df854b8ffa37ca8fdcae4abb21484e7a7a6c317eadee6d4aad
SSDEEP 6144:rtBjzL+V16KnBlROfUOMco9E50mAbLGIKniWsjyldfLGvU/xB:3r+cQBKHMh940mAbLGzIyTGvU/
MD5 SHA1 SHA512 SSDEEP

Score

5^/10

Suspicious use of SetThreadContext 2 IoCs

description	pid	Process	procid_target
PID 4928 set thread context of 1080	4928	4f22b8be8772f78fbde4e55ef54c0ce5.exe	85
PID 1080 set thread context of 1836	1080	4f22b8be8772f78fbde4e55ef54c0ce5.exe	87

Suspicious use of WriteProcessMemory 19 IoCs

description	pid	Process	procid_target
PID 4928 wrote to memory of 1080	4928	4f22b8be8772f78fbde4e55ef54c0ce5.exe	85
PID 4928 wrote to memory of 1080	4928	4f22b8be8772f78fbde4e55ef54c0ce5.exe	85
PID 4928 wrote to memory of 1080	4928	4f22b8be8772f78fbde4e55ef54c0ce5.exe	85
PID 4928 wrote to memory of 1080	4928	4f22b8be8772f78fbde4e55ef54c0ce5.exe	85
PID 4928 wrote to memory of 1080	4928	4f22b8be8772f78fbde4e55ef54c0ce5.exe	85
PID 4928 wrote to memory of 1080	4928	4f22b8be8772f78fbde4e55ef54c0ce5.exe	85
PID 4928 wrote to memory of 1080	4928	4f22b8be8772f78fbde4e55ef54c0ce5.exe	85
PID 4928 wrote to memory of 1080	4928	4f22b8be8772f78fbde4e55ef54c0ce5.exe	85
PID 4928 wrote to memory of 1080	4928	4f22b8be8772f78fbde4e55ef54c0ce5.exe	85
PID 4928 wrote to memory of 1080	4928	4f22b8be8772f78fbde4e55ef54c0ce5.exe	85
PID 1080 wrote to memory of 1836	1080	4f22b8be8772f78fbde4e55ef54c0ce5.exe	87
PID 1080 wrote to memory of 1836	1080	4f22b8be8772f78fbde4e55ef54c0ce5.exe	87
PID 1080 wrote to memory of 1836	1080	4f22b8be8772f78fbde4e55ef54c0ce5.exe	87
PID 1080 wrote to memory of 1836	1080	4f22b8be8772f78fbde4e55ef54c0ce5.exe	87
PID 1080 wrote to memory of 1836	1080	4f22b8be8772f78fbde4e55ef54c0ce5.exe	87
PID 1080 wrote to memory of 1836	1080	4f22b8be8772f78fbde4e55ef54c0ce5.exe	87
PID 1080 wrote to memory of 1836	1080	4f22b8be8772f78fbde4e55ef54c0ce5.exe	87
PID 1080 wrote to memory of 1836	1080	4f22b8be8772f78fbde4e55ef54c0ce5.exe	87
PID 1080 wrote to memory of 1836	1080	4f22b8be8772f78fbde4e55ef54c0ce5.exe	87

memory/1080-134-0x0000000000E10000-0x0000000000E4A000-memory.dmp

Download

memory/1080-139-0x0000000000E10000-0x0000000000E4A000-memory.dmp

Download

memory/1080-143-0x0000000000E10000-0x0000000000E4A000-memory.dmp

Download

memory/1080-144-0x0000000000E10000-0x0000000000E4A000-memory.dmp

Download

memory/1836-148-0x0000000000F50000-0x0000000000F86000-memory.dmp

Download

memory/1836-152-0x0000000000F50000-0x0000000000F86000-memory.dmp

Download

memory/4928-132-0x0000000000010000-0x0000000000059000-memory.dmp

Download