5d340802b333cfa3dc5b71c8d126d38465a5ecece0131fdd86d75f70cdc2f092

Analysis

max time kernel
42s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
19/09/2022, 02:13

Target

5d340802b333cfa3dc5b71c8d126d38465a5ecece0131fdd86d75f70cdc2f092.exe
Size

565KB
MD5

3c43d445deb303ee47f73de7dd99da75
SHA1

ac318371696eb1b162e42933b85a6a1f03db3164
SHA256

5d340802b333cfa3dc5b71c8d126d38465a5ecece0131fdd86d75f70cdc2f092
SHA512

3de8b119a0332a11558598c27984d96acc2093837964d1f54445e56253598b4d60a69aabf66ba3b1f008fbc0987be326b7166010c6a2e251d754efc6de025bb9
SSDEEP

12288:oVXDiUH654+y+2CcJVPRZthXkK/lGRgOUqmq9kR6lhKXmpfGWx9cZpvE5:oVTiyOXyTCOpjkK/cRgOnmq9g67Tx9cK

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1652 set thread context of 1232	1652	5d340802b333cfa3dc5b71c8d126d38465a5ecece0131fdd86d75f70cdc2f092.exe	28

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1232	5d340802b333cfa3dc5b71c8d126d38465a5ecece0131fdd86d75f70cdc2f092.exe
1232	5d340802b333cfa3dc5b71c8d126d38465a5ecece0131fdd86d75f70cdc2f092.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1652	5d340802b333cfa3dc5b71c8d126d38465a5ecece0131fdd86d75f70cdc2f092.exe

Suspicious use of WriteProcessMemory 12 IoCs

description	pid	Process	procid_target
PID 1652 wrote to memory of 1232	1652	5d340802b333cfa3dc5b71c8d126d38465a5ecece0131fdd86d75f70cdc2f092.exe	28
PID 1652 wrote to memory of 1232	1652	5d340802b333cfa3dc5b71c8d126d38465a5ecece0131fdd86d75f70cdc2f092.exe	28
PID 1652 wrote to memory of 1232	1652	5d340802b333cfa3dc5b71c8d126d38465a5ecece0131fdd86d75f70cdc2f092.exe	28
PID 1652 wrote to memory of 1232	1652	5d340802b333cfa3dc5b71c8d126d38465a5ecece0131fdd86d75f70cdc2f092.exe	28
PID 1652 wrote to memory of 1232	1652	5d340802b333cfa3dc5b71c8d126d38465a5ecece0131fdd86d75f70cdc2f092.exe	28
PID 1652 wrote to memory of 1232	1652	5d340802b333cfa3dc5b71c8d126d38465a5ecece0131fdd86d75f70cdc2f092.exe	28
PID 1652 wrote to memory of 1232	1652	5d340802b333cfa3dc5b71c8d126d38465a5ecece0131fdd86d75f70cdc2f092.exe	28
PID 1652 wrote to memory of 1232	1652	5d340802b333cfa3dc5b71c8d126d38465a5ecece0131fdd86d75f70cdc2f092.exe	28
PID 1232 wrote to memory of 1256	1232	5d340802b333cfa3dc5b71c8d126d38465a5ecece0131fdd86d75f70cdc2f092.exe	17
PID 1232 wrote to memory of 1256	1232	5d340802b333cfa3dc5b71c8d126d38465a5ecece0131fdd86d75f70cdc2f092.exe	17
PID 1232 wrote to memory of 1256	1232	5d340802b333cfa3dc5b71c8d126d38465a5ecece0131fdd86d75f70cdc2f092.exe	17
PID 1232 wrote to memory of 1256	1232	5d340802b333cfa3dc5b71c8d126d38465a5ecece0131fdd86d75f70cdc2f092.exe	17

memory/1232-58-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1232-63-0x0000000000400000-0x0000000000408960-memory.dmp

Filesize
34KB

Download
memory/1232-64-0x0000000076041000-0x0000000076043000-memory.dmp

Filesize
8KB

Download
memory/1232-68-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/1256-65-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/1652-54-0x0000000000400000-0x000000000051E000-memory.dmp

Filesize
1.1MB

Download
memory/1652-55-0x0000000000340000-0x00000000003A0000-memory.dmp

Filesize
384KB

Download
memory/1652-61-0x0000000000400000-0x000000000051E000-memory.dmp

Filesize
1.1MB

Download
memory/1652-62-0x0000000000340000-0x00000000003A0000-memory.dmp

Filesize
384KB

Download