5d340802b333cfa3dc5b71c8d126d38465a5ecece0131fdd86d75f70cdc2f092

Analysis

max time kernel
73s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
19/09/2022, 02:13

Target

5d340802b333cfa3dc5b71c8d126d38465a5ecece0131fdd86d75f70cdc2f092.exe
Size

565KB
MD5

3c43d445deb303ee47f73de7dd99da75
SHA1

ac318371696eb1b162e42933b85a6a1f03db3164
SHA256

5d340802b333cfa3dc5b71c8d126d38465a5ecece0131fdd86d75f70cdc2f092
SHA512

3de8b119a0332a11558598c27984d96acc2093837964d1f54445e56253598b4d60a69aabf66ba3b1f008fbc0987be326b7166010c6a2e251d754efc6de025bb9
SSDEEP

12288:oVXDiUH654+y+2CcJVPRZthXkK/lGRgOUqmq9kR6lhKXmpfGWx9cZpvE5:oVTiyOXyTCOpjkK/cRgOnmq9g67Tx9cK

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 4728 set thread context of 4812	4728	5d340802b333cfa3dc5b71c8d126d38465a5ecece0131fdd86d75f70cdc2f092.exe	80

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4812	5d340802b333cfa3dc5b71c8d126d38465a5ecece0131fdd86d75f70cdc2f092.exe
4812	5d340802b333cfa3dc5b71c8d126d38465a5ecece0131fdd86d75f70cdc2f092.exe
4812	5d340802b333cfa3dc5b71c8d126d38465a5ecece0131fdd86d75f70cdc2f092.exe
4812	5d340802b333cfa3dc5b71c8d126d38465a5ecece0131fdd86d75f70cdc2f092.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4728	5d340802b333cfa3dc5b71c8d126d38465a5ecece0131fdd86d75f70cdc2f092.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 4728 wrote to memory of 4812	4728	5d340802b333cfa3dc5b71c8d126d38465a5ecece0131fdd86d75f70cdc2f092.exe	80
PID 4728 wrote to memory of 4812	4728	5d340802b333cfa3dc5b71c8d126d38465a5ecece0131fdd86d75f70cdc2f092.exe	80
PID 4728 wrote to memory of 4812	4728	5d340802b333cfa3dc5b71c8d126d38465a5ecece0131fdd86d75f70cdc2f092.exe	80
PID 4728 wrote to memory of 4812	4728	5d340802b333cfa3dc5b71c8d126d38465a5ecece0131fdd86d75f70cdc2f092.exe	80
PID 4728 wrote to memory of 4812	4728	5d340802b333cfa3dc5b71c8d126d38465a5ecece0131fdd86d75f70cdc2f092.exe	80
PID 4728 wrote to memory of 4812	4728	5d340802b333cfa3dc5b71c8d126d38465a5ecece0131fdd86d75f70cdc2f092.exe	80
PID 4728 wrote to memory of 4812	4728	5d340802b333cfa3dc5b71c8d126d38465a5ecece0131fdd86d75f70cdc2f092.exe	80
PID 4812 wrote to memory of 2644	4812	5d340802b333cfa3dc5b71c8d126d38465a5ecece0131fdd86d75f70cdc2f092.exe	24
PID 4812 wrote to memory of 2644	4812	5d340802b333cfa3dc5b71c8d126d38465a5ecece0131fdd86d75f70cdc2f092.exe	24
PID 4812 wrote to memory of 2644	4812	5d340802b333cfa3dc5b71c8d126d38465a5ecece0131fdd86d75f70cdc2f092.exe	24
PID 4812 wrote to memory of 2644	4812	5d340802b333cfa3dc5b71c8d126d38465a5ecece0131fdd86d75f70cdc2f092.exe	24

memory/2644-143-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/4728-132-0x0000000000400000-0x000000000051E000-memory.dmp

Filesize
1.1MB

Download
memory/4728-133-0x00000000022E0000-0x0000000002340000-memory.dmp

Filesize
384KB

Download
memory/4728-139-0x0000000000400000-0x000000000051E000-memory.dmp

Filesize
1.1MB

Download
memory/4728-140-0x00000000022E0000-0x0000000002340000-memory.dmp

Filesize
384KB

Download
memory/4812-137-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/4812-141-0x0000000000400000-0x0000000000408960-memory.dmp

Filesize
34KB

Download
memory/4812-142-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/4812-144-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download