cdbce2ab6a9693923e599ab88bc1e1b654d5be25fd28fa9ff4d6894e79cb64ba

Analysis

max time kernel
77s
max time network
129s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
11-09-2022 11:35

Target

file.exe
Size

263KB
MD5

b58d7eaa82700f2d20d3d3bc75e2bf89
SHA1

55f73c0791092db7aa0b589f6f25c6a08218bdbc
SHA256

cdbce2ab6a9693923e599ab88bc1e1b654d5be25fd28fa9ff4d6894e79cb64ba
SHA512

710c7a38d6f7c251911ecfdea8a47acb8ce88ff07ad686db80aa18102cb07b1a5ef4865fa763bae2ae8e1469dece420fe84de0b33ead0dd463753b328498dfaa
SSDEEP

6144:w7hBjzrFdAxcUYQaVVI1eMq1OoFMPKq2+qASYj8CpGEQ:wrpdOcoaPIwMqfFMsdcjQ

Score

5^/10

Suspicious use of SetThreadContext 2 IoCs

description	pid	Process	procid_target
PID 1944 set thread context of 1656	1944	file.exe	85
PID 1656 set thread context of 2292	1656	file.exe	87

Suspicious use of WriteProcessMemory 19 IoCs

description	pid	Process	procid_target
PID 1944 wrote to memory of 1656	1944	file.exe	85
PID 1944 wrote to memory of 1656	1944	file.exe	85
PID 1944 wrote to memory of 1656	1944	file.exe	85
PID 1944 wrote to memory of 1656	1944	file.exe	85
PID 1944 wrote to memory of 1656	1944	file.exe	85
PID 1944 wrote to memory of 1656	1944	file.exe	85
PID 1944 wrote to memory of 1656	1944	file.exe	85
PID 1944 wrote to memory of 1656	1944	file.exe	85
PID 1944 wrote to memory of 1656	1944	file.exe	85
PID 1944 wrote to memory of 1656	1944	file.exe	85
PID 1656 wrote to memory of 2292	1656	file.exe	87
PID 1656 wrote to memory of 2292	1656	file.exe	87
PID 1656 wrote to memory of 2292	1656	file.exe	87
PID 1656 wrote to memory of 2292	1656	file.exe	87
PID 1656 wrote to memory of 2292	1656	file.exe	87
PID 1656 wrote to memory of 2292	1656	file.exe	87
PID 1656 wrote to memory of 2292	1656	file.exe	87
PID 1656 wrote to memory of 2292	1656	file.exe	87
PID 1656 wrote to memory of 2292	1656	file.exe	87

memory/1656-136-0x0000000000000000-mapping.dmp

Download
memory/1656-137-0x0000000000C00000-0x0000000000C3A000-memory.dmp

Filesize
232KB

Download
memory/1656-142-0x0000000000C00000-0x0000000000C3A000-memory.dmp

Filesize
232KB

Download
memory/1656-146-0x0000000000C00000-0x0000000000C3A000-memory.dmp

Filesize
232KB

Download
memory/1656-147-0x0000000000C00000-0x0000000000C3A000-memory.dmp

Filesize
232KB

Download
memory/1944-135-0x0000000000590000-0x00000000005D5000-memory.dmp

Filesize
276KB

Download
memory/2292-150-0x0000000000000000-mapping.dmp

Download
memory/2292-151-0x0000000000800000-0x0000000000836000-memory.dmp

Filesize
216KB

Download
memory/2292-155-0x0000000000800000-0x0000000000836000-memory.dmp

Filesize
216KB

Download