d4717a363580201a22f8fe75dc54825cfbefc6cb36cc35549444b6ac8e78d0c4

Analysis

max time kernel
91s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
19/09/2022, 20:22

Target

d4717a363580201a22f8fe75dc54825cfbefc6cb36cc35549444b6ac8e78d0c4.exe
Size

45KB
MD5

c4adcb98a67603a71c85ff6bb65e343f
SHA1

00032b5ca05bccec627601b701ab3b3d22dfff5c
SHA256

d4717a363580201a22f8fe75dc54825cfbefc6cb36cc35549444b6ac8e78d0c4
SHA512

05a9a3477b24fce57178d575ced158bb77bfd8d35a2772412337d0489f88713c8febd8723d51387d3ce1af5e4aa1770439634194d09b06ccd2bdd0af6ca6aaab
SSDEEP

768:XWmrM6ttB84b+gjOxgBlO0X1DfQSvz7Xkb0uYzGjBbbH3ALUsyhuevRR:XZM6a4igSCOuUuXkb0TKdHMVERR

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 4416 set thread context of 4680	4416	d4717a363580201a22f8fe75dc54825cfbefc6cb36cc35549444b6ac8e78d0c4.exe	80

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4680	d4717a363580201a22f8fe75dc54825cfbefc6cb36cc35549444b6ac8e78d0c4.exe
4680	d4717a363580201a22f8fe75dc54825cfbefc6cb36cc35549444b6ac8e78d0c4.exe
4680	d4717a363580201a22f8fe75dc54825cfbefc6cb36cc35549444b6ac8e78d0c4.exe
4680	d4717a363580201a22f8fe75dc54825cfbefc6cb36cc35549444b6ac8e78d0c4.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 4416 wrote to memory of 4680	4416	d4717a363580201a22f8fe75dc54825cfbefc6cb36cc35549444b6ac8e78d0c4.exe	80
PID 4416 wrote to memory of 4680	4416	d4717a363580201a22f8fe75dc54825cfbefc6cb36cc35549444b6ac8e78d0c4.exe	80
PID 4416 wrote to memory of 4680	4416	d4717a363580201a22f8fe75dc54825cfbefc6cb36cc35549444b6ac8e78d0c4.exe	80
PID 4416 wrote to memory of 4680	4416	d4717a363580201a22f8fe75dc54825cfbefc6cb36cc35549444b6ac8e78d0c4.exe	80
PID 4416 wrote to memory of 4680	4416	d4717a363580201a22f8fe75dc54825cfbefc6cb36cc35549444b6ac8e78d0c4.exe	80
PID 4680 wrote to memory of 2704	4680	d4717a363580201a22f8fe75dc54825cfbefc6cb36cc35549444b6ac8e78d0c4.exe	35
PID 4680 wrote to memory of 2704	4680	d4717a363580201a22f8fe75dc54825cfbefc6cb36cc35549444b6ac8e78d0c4.exe	35
PID 4680 wrote to memory of 2704	4680	d4717a363580201a22f8fe75dc54825cfbefc6cb36cc35549444b6ac8e78d0c4.exe	35
PID 4680 wrote to memory of 2704	4680	d4717a363580201a22f8fe75dc54825cfbefc6cb36cc35549444b6ac8e78d0c4.exe	35
PID 4680 wrote to memory of 2704	4680	d4717a363580201a22f8fe75dc54825cfbefc6cb36cc35549444b6ac8e78d0c4.exe	35
PID 4680 wrote to memory of 2704	4680	d4717a363580201a22f8fe75dc54825cfbefc6cb36cc35549444b6ac8e78d0c4.exe	35

memory/2704-136-0x000000007FFC0000-0x000000007FFC6000-memory.dmp

Filesize
24KB

Download
memory/4680-133-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/4680-135-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/4680-137-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download