b0b0ca44c01c27fb9e88aa2fb15822c23ce8bd5fb6ff540981407e4bd3bdc470

Analysis

max time kernel
44s
max time network
49s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
31/10/2022, 01:14

Target

b0b0ca44c01c27fb9e88aa2fb15822c23ce8bd5fb6ff540981407e4bd3bdc470.exe
Size

79KB
MD5

a24bd9d238cc8a23e84d6b8121860338
SHA1

823e7b078356522723e8f99dc82d0cdad1691dca
SHA256

b0b0ca44c01c27fb9e88aa2fb15822c23ce8bd5fb6ff540981407e4bd3bdc470
SHA512

1e2144e08e796d4321f39f72216c1cc2e35f88d0e7ff2dabdb349e74d37fa9b7ac5ccb47a0726f4049a071759b411a1d7121049e37d27a0cbce1b0e899dbf93e
SSDEEP

1536:Y85ttbbdXJ0qO/cRApm1kTYXEb8uyPG29zHW7u+y1s:vFbbZJ05/+ApLs0bOPG2VHW7u1y

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1724 set thread context of 2036	1724	b0b0ca44c01c27fb9e88aa2fb15822c23ce8bd5fb6ff540981407e4bd3bdc470.exe	27

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2036	b0b0ca44c01c27fb9e88aa2fb15822c23ce8bd5fb6ff540981407e4bd3bdc470.exe
2036	b0b0ca44c01c27fb9e88aa2fb15822c23ce8bd5fb6ff540981407e4bd3bdc470.exe

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 1724 wrote to memory of 2036	1724	b0b0ca44c01c27fb9e88aa2fb15822c23ce8bd5fb6ff540981407e4bd3bdc470.exe	27
PID 1724 wrote to memory of 2036	1724	b0b0ca44c01c27fb9e88aa2fb15822c23ce8bd5fb6ff540981407e4bd3bdc470.exe	27
PID 1724 wrote to memory of 2036	1724	b0b0ca44c01c27fb9e88aa2fb15822c23ce8bd5fb6ff540981407e4bd3bdc470.exe	27
PID 1724 wrote to memory of 2036	1724	b0b0ca44c01c27fb9e88aa2fb15822c23ce8bd5fb6ff540981407e4bd3bdc470.exe	27
PID 1724 wrote to memory of 2036	1724	b0b0ca44c01c27fb9e88aa2fb15822c23ce8bd5fb6ff540981407e4bd3bdc470.exe	27
PID 1724 wrote to memory of 2036	1724	b0b0ca44c01c27fb9e88aa2fb15822c23ce8bd5fb6ff540981407e4bd3bdc470.exe	27
PID 2036 wrote to memory of 1348	2036	b0b0ca44c01c27fb9e88aa2fb15822c23ce8bd5fb6ff540981407e4bd3bdc470.exe	13
PID 2036 wrote to memory of 1348	2036	b0b0ca44c01c27fb9e88aa2fb15822c23ce8bd5fb6ff540981407e4bd3bdc470.exe	13
PID 2036 wrote to memory of 1348	2036	b0b0ca44c01c27fb9e88aa2fb15822c23ce8bd5fb6ff540981407e4bd3bdc470.exe	13
PID 2036 wrote to memory of 1348	2036	b0b0ca44c01c27fb9e88aa2fb15822c23ce8bd5fb6ff540981407e4bd3bdc470.exe	13

memory/1348-60-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/1724-54-0x0000000074B51000-0x0000000074B53000-memory.dmp

Filesize
8KB

Download
memory/2036-55-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2036-58-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2036-63-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/2036-64-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download