9c7194c31b714546a310d466fa31dc4b778c4b02ffce47b678aa15ebf21fd6f9

Analysis

max time kernel
158s
max time network
174s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
19/09/2022, 01:55

Target

9c7194c31b714546a310d466fa31dc4b778c4b02ffce47b678aa15ebf21fd6f9.exe
Size

176KB
MD5

ab267ebe94bd1628389ae89b7c6abac8
SHA1

93879ba8e16cedcbabfc0c701bc8830465940b42
SHA256

9c7194c31b714546a310d466fa31dc4b778c4b02ffce47b678aa15ebf21fd6f9
SHA512

b047a680601dd2b662c1e3c26faa554e6cf411e71cee23e91e448234ece04bd1b89c2fbc7d472e9126991c714de7e11a4c6c5b51d76d23f9923d669f1b73b797
SSDEEP

3072:XY0vn9ATsDPUW4lYG4SlwP9LbNA/KX9468wFP+HXpe/v3Iu5zyw3MvGgWYVnmByp:oFTsDPFpSGpNvO6FyXpe/vY2EGgdn

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2264 set thread context of 3788	2264	9c7194c31b714546a310d466fa31dc4b778c4b02ffce47b678aa15ebf21fd6f9.exe	79

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3788	9c7194c31b714546a310d466fa31dc4b778c4b02ffce47b678aa15ebf21fd6f9.exe
3788	9c7194c31b714546a310d466fa31dc4b778c4b02ffce47b678aa15ebf21fd6f9.exe
3788	9c7194c31b714546a310d466fa31dc4b778c4b02ffce47b678aa15ebf21fd6f9.exe
3788	9c7194c31b714546a310d466fa31dc4b778c4b02ffce47b678aa15ebf21fd6f9.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2264	9c7194c31b714546a310d466fa31dc4b778c4b02ffce47b678aa15ebf21fd6f9.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2264 wrote to memory of 3788	2264	9c7194c31b714546a310d466fa31dc4b778c4b02ffce47b678aa15ebf21fd6f9.exe	79
PID 2264 wrote to memory of 3788	2264	9c7194c31b714546a310d466fa31dc4b778c4b02ffce47b678aa15ebf21fd6f9.exe	79
PID 2264 wrote to memory of 3788	2264	9c7194c31b714546a310d466fa31dc4b778c4b02ffce47b678aa15ebf21fd6f9.exe	79
PID 2264 wrote to memory of 3788	2264	9c7194c31b714546a310d466fa31dc4b778c4b02ffce47b678aa15ebf21fd6f9.exe	79
PID 2264 wrote to memory of 3788	2264	9c7194c31b714546a310d466fa31dc4b778c4b02ffce47b678aa15ebf21fd6f9.exe	79
PID 2264 wrote to memory of 3788	2264	9c7194c31b714546a310d466fa31dc4b778c4b02ffce47b678aa15ebf21fd6f9.exe	79
PID 2264 wrote to memory of 3788	2264	9c7194c31b714546a310d466fa31dc4b778c4b02ffce47b678aa15ebf21fd6f9.exe	79
PID 3788 wrote to memory of 2556	3788	9c7194c31b714546a310d466fa31dc4b778c4b02ffce47b678aa15ebf21fd6f9.exe	54
PID 3788 wrote to memory of 2556	3788	9c7194c31b714546a310d466fa31dc4b778c4b02ffce47b678aa15ebf21fd6f9.exe	54
PID 3788 wrote to memory of 2556	3788	9c7194c31b714546a310d466fa31dc4b778c4b02ffce47b678aa15ebf21fd6f9.exe	54
PID 3788 wrote to memory of 2556	3788	9c7194c31b714546a310d466fa31dc4b778c4b02ffce47b678aa15ebf21fd6f9.exe	54

memory/2264-133-0x0000000000400000-0x000000000042C000-memory.dmp

Filesize
176KB

Download
memory/2264-134-0x0000000000570000-0x0000000000574000-memory.dmp

Filesize
16KB

Download
memory/2264-135-0x00000000020B0000-0x00000000020E9000-memory.dmp

Filesize
228KB

Download
memory/2264-141-0x0000000000400000-0x000000000042C000-memory.dmp

Filesize
176KB

Download
memory/2264-142-0x00000000020B0000-0x00000000020E9000-memory.dmp

Filesize
228KB

Download
memory/2556-144-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/3788-139-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3788-143-0x0000000000400000-0x0000000000408960-memory.dmp

Filesize
34KB

Download
memory/3788-145-0x0000000000400000-0x0000000000408960-memory.dmp

Filesize
34KB

Download
memory/3788-146-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download