55a6ac5d486dcedcccac8b53bebb132e22465ee7e7e024cddbd2368d9beb7512

Analysis

max time kernel
146s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
20/10/2022, 17:01

Target

55a6ac5d486dcedcccac8b53bebb132e22465ee7e7e024cddbd2368d9beb7512.exe
Size

39KB
MD5

42e5370c333912a4e024479383106010
SHA1

2c1d745bd5e946ab14394dbdf3cb42b973ca2aef
SHA256

55a6ac5d486dcedcccac8b53bebb132e22465ee7e7e024cddbd2368d9beb7512
SHA512

70a753d1953d8e667021bf59e818ec02a1c738503f52c4bb1d73a817c69f144c164cf03d46010f56c8afd715e70cf606b4596b0a8744acce4f037977e6c9290c
SSDEEP

768:pXvxxkleosTR8hiryWU7qdEhkyGR8hiryWU7qdEhky/usX50:lxxkY1lZdEh3MlZdEh3/us

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 4988 set thread context of 2108	4988	55a6ac5d486dcedcccac8b53bebb132e22465ee7e7e024cddbd2368d9beb7512.exe	84

Suspicious behavior: MapViewOfSection 2 IoCs

pid	Process
2108	55a6ac5d486dcedcccac8b53bebb132e22465ee7e7e024cddbd2368d9beb7512.exe
2108	55a6ac5d486dcedcccac8b53bebb132e22465ee7e7e024cddbd2368d9beb7512.exe

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 4988 wrote to memory of 2108	4988	55a6ac5d486dcedcccac8b53bebb132e22465ee7e7e024cddbd2368d9beb7512.exe	84
PID 4988 wrote to memory of 2108	4988	55a6ac5d486dcedcccac8b53bebb132e22465ee7e7e024cddbd2368d9beb7512.exe	84
PID 4988 wrote to memory of 2108	4988	55a6ac5d486dcedcccac8b53bebb132e22465ee7e7e024cddbd2368d9beb7512.exe	84
PID 4988 wrote to memory of 2108	4988	55a6ac5d486dcedcccac8b53bebb132e22465ee7e7e024cddbd2368d9beb7512.exe	84
PID 4988 wrote to memory of 2108	4988	55a6ac5d486dcedcccac8b53bebb132e22465ee7e7e024cddbd2368d9beb7512.exe	84
PID 4988 wrote to memory of 2108	4988	55a6ac5d486dcedcccac8b53bebb132e22465ee7e7e024cddbd2368d9beb7512.exe	84
PID 4988 wrote to memory of 2108	4988	55a6ac5d486dcedcccac8b53bebb132e22465ee7e7e024cddbd2368d9beb7512.exe	84
PID 2108 wrote to memory of 1448	2108	55a6ac5d486dcedcccac8b53bebb132e22465ee7e7e024cddbd2368d9beb7512.exe	85
PID 2108 wrote to memory of 1448	2108	55a6ac5d486dcedcccac8b53bebb132e22465ee7e7e024cddbd2368d9beb7512.exe	85
PID 2108 wrote to memory of 1448	2108	55a6ac5d486dcedcccac8b53bebb132e22465ee7e7e024cddbd2368d9beb7512.exe	85

memory/2108-133-0x0000000000400000-0x0000000000404000-memory.dmp

Filesize
16KB

Download
memory/2108-135-0x0000000000400000-0x0000000000404000-memory.dmp

Filesize
16KB

Download