b1313ae561fc56da1c4b750cfb6d428b91d0888e26b482c681766be25c89531c

Analysis

max time kernel
35s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
01-10-2022 19:53

Target

b1313ae561fc56da1c4b750cfb6d428b91d0888e26b482c681766be25c89531c.exe
Size

27KB
MD5

0310bd03780cc34a62505a3847b742f0
SHA1

7ee5a49ca96c8f90370a4e4f376d6c053694d476
SHA256

b1313ae561fc56da1c4b750cfb6d428b91d0888e26b482c681766be25c89531c
SHA512

ecab32b44fb013d37bee22f4824bc786e3e2577438c7e34deeaac2d124841b73fc6e67ecbc78d7fc8937c5cd3a860332b00b82cce95b477575ff6bef80cfcffd
SSDEEP

384:gSnYD1yrLFq9DBrooOug/cshv4e4xC7QybPp1OHZ:NW1yrg9D7g/H+wQI3c

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1096 set thread context of 1472	1096	b1313ae561fc56da1c4b750cfb6d428b91d0888e26b482c681766be25c89531c.exe	26

Suspicious use of WriteProcessMemory 9 IoCs

description	pid	Process	procid_target
PID 1096 wrote to memory of 1472	1096	b1313ae561fc56da1c4b750cfb6d428b91d0888e26b482c681766be25c89531c.exe	26
PID 1096 wrote to memory of 1472	1096	b1313ae561fc56da1c4b750cfb6d428b91d0888e26b482c681766be25c89531c.exe	26
PID 1096 wrote to memory of 1472	1096	b1313ae561fc56da1c4b750cfb6d428b91d0888e26b482c681766be25c89531c.exe	26
PID 1096 wrote to memory of 1472	1096	b1313ae561fc56da1c4b750cfb6d428b91d0888e26b482c681766be25c89531c.exe	26
PID 1096 wrote to memory of 1472	1096	b1313ae561fc56da1c4b750cfb6d428b91d0888e26b482c681766be25c89531c.exe	26
PID 1096 wrote to memory of 1472	1096	b1313ae561fc56da1c4b750cfb6d428b91d0888e26b482c681766be25c89531c.exe	26
PID 1096 wrote to memory of 1472	1096	b1313ae561fc56da1c4b750cfb6d428b91d0888e26b482c681766be25c89531c.exe	26
PID 1096 wrote to memory of 1472	1096	b1313ae561fc56da1c4b750cfb6d428b91d0888e26b482c681766be25c89531c.exe	26
PID 1096 wrote to memory of 1472	1096	b1313ae561fc56da1c4b750cfb6d428b91d0888e26b482c681766be25c89531c.exe	26

memory/1096-54-0x00000000768A1000-0x00000000768A3000-memory.dmp

Filesize
8KB

Download
memory/1096-55-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1096-60-0x0000000000020000-0x000000000002A000-memory.dmp

Filesize
40KB

Download
memory/1096-61-0x0000000000020000-0x000000000002A000-memory.dmp

Filesize
40KB

Download
memory/1096-62-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1472-56-0x0000000000400000-0x0000000000405000-memory.dmp

Filesize
20KB

Download
memory/1472-58-0x0000000000400000-0x0000000000405000-memory.dmp

Filesize
20KB

Download
memory/1472-59-0x000000000040289F-mapping.dmp

Download