1d0c59097b7a3e7a2eef3dd06989edf07601d7953187de35f99cd8ff4fc772f5

Analysis

max time kernel
37s
max time network
41s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
19/09/2022, 07:19

Target

1d0c59097b7a3e7a2eef3dd06989edf07601d7953187de35f99cd8ff4fc772f5.exe
Size

301KB
MD5

2e9a52594d64d75f396f9079b2332a4f
SHA1

c27e2a039f792348c622bbb6812558d31382d226
SHA256

1d0c59097b7a3e7a2eef3dd06989edf07601d7953187de35f99cd8ff4fc772f5
SHA512

053285b7ce7c94f95486537764e5b4c9fe906aae5ea12a9d36a803b791e59251a330614885764bb6ae6608be93327f66081a0f3b7c121c72d456b5e18b239bfe
SSDEEP

3072:8Jtn5ymi8Eu11uZaLJbN2SQ3N7Do0JgT5SVtoaKGlD8yWC242UcdRCU4J4lg4E4D:zKA9PnGmE

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1928 set thread context of 1708	1928	1d0c59097b7a3e7a2eef3dd06989edf07601d7953187de35f99cd8ff4fc772f5.exe	26

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1708	1d0c59097b7a3e7a2eef3dd06989edf07601d7953187de35f99cd8ff4fc772f5.exe
1708	1d0c59097b7a3e7a2eef3dd06989edf07601d7953187de35f99cd8ff4fc772f5.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1928	1d0c59097b7a3e7a2eef3dd06989edf07601d7953187de35f99cd8ff4fc772f5.exe

Suspicious use of WriteProcessMemory 12 IoCs

description	pid	Process	procid_target
PID 1928 wrote to memory of 1708	1928	1d0c59097b7a3e7a2eef3dd06989edf07601d7953187de35f99cd8ff4fc772f5.exe	26
PID 1928 wrote to memory of 1708	1928	1d0c59097b7a3e7a2eef3dd06989edf07601d7953187de35f99cd8ff4fc772f5.exe	26
PID 1928 wrote to memory of 1708	1928	1d0c59097b7a3e7a2eef3dd06989edf07601d7953187de35f99cd8ff4fc772f5.exe	26
PID 1928 wrote to memory of 1708	1928	1d0c59097b7a3e7a2eef3dd06989edf07601d7953187de35f99cd8ff4fc772f5.exe	26
PID 1928 wrote to memory of 1708	1928	1d0c59097b7a3e7a2eef3dd06989edf07601d7953187de35f99cd8ff4fc772f5.exe	26
PID 1928 wrote to memory of 1708	1928	1d0c59097b7a3e7a2eef3dd06989edf07601d7953187de35f99cd8ff4fc772f5.exe	26
PID 1928 wrote to memory of 1708	1928	1d0c59097b7a3e7a2eef3dd06989edf07601d7953187de35f99cd8ff4fc772f5.exe	26
PID 1928 wrote to memory of 1708	1928	1d0c59097b7a3e7a2eef3dd06989edf07601d7953187de35f99cd8ff4fc772f5.exe	26
PID 1708 wrote to memory of 1400	1708	1d0c59097b7a3e7a2eef3dd06989edf07601d7953187de35f99cd8ff4fc772f5.exe	12
PID 1708 wrote to memory of 1400	1708	1d0c59097b7a3e7a2eef3dd06989edf07601d7953187de35f99cd8ff4fc772f5.exe	12
PID 1708 wrote to memory of 1400	1708	1d0c59097b7a3e7a2eef3dd06989edf07601d7953187de35f99cd8ff4fc772f5.exe	12
PID 1708 wrote to memory of 1400	1708	1d0c59097b7a3e7a2eef3dd06989edf07601d7953187de35f99cd8ff4fc772f5.exe	12

memory/1400-65-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/1708-56-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1708-57-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1708-59-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1708-60-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1708-63-0x0000000000400000-0x0000000000408960-memory.dmp

Filesize
34KB

Download
memory/1708-64-0x00000000762B1000-0x00000000762B3000-memory.dmp

Filesize
8KB

Download
memory/1708-68-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download