3698d742463af93317dfd1dcc8ad4ccd2503858df84d9540be75e48489a3f5d4

Analysis

max time kernel
145s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
19/09/2022, 07:31

Target

3698d742463af93317dfd1dcc8ad4ccd2503858df84d9540be75e48489a3f5d4.exe
Size

56KB
MD5

8d5c897247747212913ab951d3e06b0a
SHA1

ae9257de18a91be0457e0f2340c367a608395808
SHA256

3698d742463af93317dfd1dcc8ad4ccd2503858df84d9540be75e48489a3f5d4
SHA512

9ab70d767723ec05a41b32d4f9a8ced08b285f1467fad279748b088c3eb206c91a9d6623fcabfcc000d23bea45556dfdf75d9a5e19c7a4c1bef0967c9980fecc
SSDEEP

768:Q1Yf21PcKurezSybn7vPrquxHTWQvuAlqdrx8HpOV7nDfviHu:sfPTSybnvquxzWgusqRIZHu

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 4568 set thread context of 4940	4568	3698d742463af93317dfd1dcc8ad4ccd2503858df84d9540be75e48489a3f5d4.exe	84

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4940	3698d742463af93317dfd1dcc8ad4ccd2503858df84d9540be75e48489a3f5d4.exe
4940	3698d742463af93317dfd1dcc8ad4ccd2503858df84d9540be75e48489a3f5d4.exe
4940	3698d742463af93317dfd1dcc8ad4ccd2503858df84d9540be75e48489a3f5d4.exe
4940	3698d742463af93317dfd1dcc8ad4ccd2503858df84d9540be75e48489a3f5d4.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4568	3698d742463af93317dfd1dcc8ad4ccd2503858df84d9540be75e48489a3f5d4.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 4568 wrote to memory of 4940	4568	3698d742463af93317dfd1dcc8ad4ccd2503858df84d9540be75e48489a3f5d4.exe	84
PID 4568 wrote to memory of 4940	4568	3698d742463af93317dfd1dcc8ad4ccd2503858df84d9540be75e48489a3f5d4.exe	84
PID 4568 wrote to memory of 4940	4568	3698d742463af93317dfd1dcc8ad4ccd2503858df84d9540be75e48489a3f5d4.exe	84
PID 4568 wrote to memory of 4940	4568	3698d742463af93317dfd1dcc8ad4ccd2503858df84d9540be75e48489a3f5d4.exe	84
PID 4568 wrote to memory of 4940	4568	3698d742463af93317dfd1dcc8ad4ccd2503858df84d9540be75e48489a3f5d4.exe	84
PID 4568 wrote to memory of 4940	4568	3698d742463af93317dfd1dcc8ad4ccd2503858df84d9540be75e48489a3f5d4.exe	84
PID 4568 wrote to memory of 4940	4568	3698d742463af93317dfd1dcc8ad4ccd2503858df84d9540be75e48489a3f5d4.exe	84
PID 4940 wrote to memory of 2640	4940	3698d742463af93317dfd1dcc8ad4ccd2503858df84d9540be75e48489a3f5d4.exe	52
PID 4940 wrote to memory of 2640	4940	3698d742463af93317dfd1dcc8ad4ccd2503858df84d9540be75e48489a3f5d4.exe	52
PID 4940 wrote to memory of 2640	4940	3698d742463af93317dfd1dcc8ad4ccd2503858df84d9540be75e48489a3f5d4.exe	52
PID 4940 wrote to memory of 2640	4940	3698d742463af93317dfd1dcc8ad4ccd2503858df84d9540be75e48489a3f5d4.exe	52

memory/2640-140-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/4568-134-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/4568-138-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/4940-136-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/4940-139-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/4940-141-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download