7cb076e4988d0f153b8d37642f28f5f203473adf4338ebbd7ac2276a9b3371e2

Analysis

max time kernel
37s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
30-10-2022 19:47

Target

7cb076e4988d0f153b8d37642f28f5f203473adf4338ebbd7ac2276a9b3371e2.exe
Size

171KB
MD5

9163426b33e5c73a889d2401c173d860
SHA1

6e0b7abf04ba2334cdddd7431447c4a187d5dac8
SHA256

7cb076e4988d0f153b8d37642f28f5f203473adf4338ebbd7ac2276a9b3371e2
SHA512

561082da1f5756ad3f45250fa9baa1ba54313471f2599c63b13c728e1884ca6da5b70ec75933eadfa0640998d7fe5937ea3084ccca71f334f7fe905148295a58
SSDEEP

3072:TjKnO6oUs6tXQgY8wljEntiBj7hiI3qZrlFMg7BR63hvNlYCaxBxQoPTl7QmYAr:6O/h6tXJIjEujtiI3edT65IBNPB0m5

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1788 set thread context of 304	1788	7cb076e4988d0f153b8d37642f28f5f203473adf4338ebbd7ac2276a9b3371e2.exe	27

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
304	7cb076e4988d0f153b8d37642f28f5f203473adf4338ebbd7ac2276a9b3371e2.exe
304	7cb076e4988d0f153b8d37642f28f5f203473adf4338ebbd7ac2276a9b3371e2.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1788	7cb076e4988d0f153b8d37642f28f5f203473adf4338ebbd7ac2276a9b3371e2.exe

Suspicious use of WriteProcessMemory 12 IoCs

description	pid	Process	procid_target
PID 1788 wrote to memory of 304	1788	7cb076e4988d0f153b8d37642f28f5f203473adf4338ebbd7ac2276a9b3371e2.exe	27
PID 1788 wrote to memory of 304	1788	7cb076e4988d0f153b8d37642f28f5f203473adf4338ebbd7ac2276a9b3371e2.exe	27
PID 1788 wrote to memory of 304	1788	7cb076e4988d0f153b8d37642f28f5f203473adf4338ebbd7ac2276a9b3371e2.exe	27
PID 1788 wrote to memory of 304	1788	7cb076e4988d0f153b8d37642f28f5f203473adf4338ebbd7ac2276a9b3371e2.exe	27
PID 1788 wrote to memory of 304	1788	7cb076e4988d0f153b8d37642f28f5f203473adf4338ebbd7ac2276a9b3371e2.exe	27
PID 1788 wrote to memory of 304	1788	7cb076e4988d0f153b8d37642f28f5f203473adf4338ebbd7ac2276a9b3371e2.exe	27
PID 1788 wrote to memory of 304	1788	7cb076e4988d0f153b8d37642f28f5f203473adf4338ebbd7ac2276a9b3371e2.exe	27
PID 1788 wrote to memory of 304	1788	7cb076e4988d0f153b8d37642f28f5f203473adf4338ebbd7ac2276a9b3371e2.exe	27
PID 304 wrote to memory of 1416	304	7cb076e4988d0f153b8d37642f28f5f203473adf4338ebbd7ac2276a9b3371e2.exe	7
PID 304 wrote to memory of 1416	304	7cb076e4988d0f153b8d37642f28f5f203473adf4338ebbd7ac2276a9b3371e2.exe	7
PID 304 wrote to memory of 1416	304	7cb076e4988d0f153b8d37642f28f5f203473adf4338ebbd7ac2276a9b3371e2.exe	7
PID 304 wrote to memory of 1416	304	7cb076e4988d0f153b8d37642f28f5f203473adf4338ebbd7ac2276a9b3371e2.exe	7

memory/304-58-0x0000000000407C89-mapping.dmp

Download
memory/304-57-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/304-61-0x0000000000400000-0x0000000000408960-memory.dmp

Filesize
34KB

Download
memory/304-62-0x0000000076201000-0x0000000076203000-memory.dmp

Filesize
8KB

Download
memory/304-66-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/1416-63-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/1788-54-0x0000000000400000-0x0000000000497000-memory.dmp

Filesize
604KB

Download
memory/1788-60-0x0000000000400000-0x00000000004A1000-memory.dmp

Filesize
644KB

Download