a7c2d37fc2b8cf436165a379ae62eeef3830b77caa95d7e32ccb645b2473c1a4

Analysis

max time kernel
142s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
01/10/2022, 22:23

Target

a7c2d37fc2b8cf436165a379ae62eeef3830b77caa95d7e32ccb645b2473c1a4.exe
Size

107KB
MD5

006c1f147615b4a8cbc5c04916791648
SHA1

aa6af8df001b4d7bcff3550e3988096edd67cee2
SHA256

a7c2d37fc2b8cf436165a379ae62eeef3830b77caa95d7e32ccb645b2473c1a4
SHA512

e785dd76de780770915840506ff9942d267fca4199805219165df75f482aed7cb11df7672daf8874d21c5366e624f27948aae1b3d8c4f5c9ac07772752a8892c
SSDEEP

3072:1z7sD+DpIkT1pAFgtNQ92xlpdnXrxW1OU:1z0+FTT1qwNnlp3cOU

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 5056 set thread context of 3344	5056	a7c2d37fc2b8cf436165a379ae62eeef3830b77caa95d7e32ccb645b2473c1a4.exe	84

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3344	a7c2d37fc2b8cf436165a379ae62eeef3830b77caa95d7e32ccb645b2473c1a4.exe
3344	a7c2d37fc2b8cf436165a379ae62eeef3830b77caa95d7e32ccb645b2473c1a4.exe

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 5056 wrote to memory of 3344	5056	a7c2d37fc2b8cf436165a379ae62eeef3830b77caa95d7e32ccb645b2473c1a4.exe	84
PID 5056 wrote to memory of 3344	5056	a7c2d37fc2b8cf436165a379ae62eeef3830b77caa95d7e32ccb645b2473c1a4.exe	84
PID 5056 wrote to memory of 3344	5056	a7c2d37fc2b8cf436165a379ae62eeef3830b77caa95d7e32ccb645b2473c1a4.exe	84
PID 5056 wrote to memory of 3344	5056	a7c2d37fc2b8cf436165a379ae62eeef3830b77caa95d7e32ccb645b2473c1a4.exe	84
PID 5056 wrote to memory of 3344	5056	a7c2d37fc2b8cf436165a379ae62eeef3830b77caa95d7e32ccb645b2473c1a4.exe	84
PID 3344 wrote to memory of 3040	3344	a7c2d37fc2b8cf436165a379ae62eeef3830b77caa95d7e32ccb645b2473c1a4.exe	38
PID 3344 wrote to memory of 3040	3344	a7c2d37fc2b8cf436165a379ae62eeef3830b77caa95d7e32ccb645b2473c1a4.exe	38
PID 3344 wrote to memory of 3040	3344	a7c2d37fc2b8cf436165a379ae62eeef3830b77caa95d7e32ccb645b2473c1a4.exe	38

memory/3344-136-0x0000000000400000-0x0000000000412000-memory.dmp

Filesize
72KB

Download
memory/3344-137-0x0000000000400000-0x0000000000412000-memory.dmp

Filesize
72KB

Download
memory/3344-138-0x0000000000400000-0x0000000000412000-memory.dmp

Filesize
72KB

Download
memory/3344-140-0x0000000000400000-0x0000000000412000-memory.dmp

Filesize
72KB

Download
memory/3344-141-0x0000000000400000-0x0000000000412000-memory.dmp

Filesize
72KB

Download
memory/5056-133-0x0000000000400000-0x0000000000426000-memory.dmp

Filesize
152KB

Download
memory/5056-134-0x0000000000400000-0x0000000000426000-memory.dmp

Filesize
152KB

Download
memory/5056-139-0x0000000000400000-0x0000000000426000-memory.dmp

Filesize
152KB

Download