e5ddb5c1b9ba03f61bca2212436ec1036202e6ff2df1201775c61559a9d4db1e

Analysis

max time kernel
42s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
07/11/2022, 02:03

Target

e5ddb5c1b9ba03f61bca2212436ec1036202e6ff2df1201775c61559a9d4db1e.exe
Size

27KB
MD5

05da228a7cb3ca69f376856066665d00
SHA1

9b33be7fdf62f8ae26add32349ec2c76d0ce9ea5
SHA256

e5ddb5c1b9ba03f61bca2212436ec1036202e6ff2df1201775c61559a9d4db1e
SHA512

49b3e9cdfdb9e05f0df22cf76b3cdea3bac995ee0b44043bbb3868d8cb90748f5789f075cbe0634f677e35d39bff5c1fb7b0178ddfd992dd80052513d3ee7221
SSDEEP

384:awK8K1dlrTp1Xbmu6dkCMpgIdyRrXlowbedXfTHNk+54QybPp19HZ:aXVrlXp1rmu6KtiQyRrXcRfv54QI3H

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 896 set thread context of 1204	896	e5ddb5c1b9ba03f61bca2212436ec1036202e6ff2df1201775c61559a9d4db1e.exe	28

Suspicious use of WriteProcessMemory 9 IoCs

description	pid	Process	procid_target
PID 896 wrote to memory of 1204	896	e5ddb5c1b9ba03f61bca2212436ec1036202e6ff2df1201775c61559a9d4db1e.exe	28
PID 896 wrote to memory of 1204	896	e5ddb5c1b9ba03f61bca2212436ec1036202e6ff2df1201775c61559a9d4db1e.exe	28
PID 896 wrote to memory of 1204	896	e5ddb5c1b9ba03f61bca2212436ec1036202e6ff2df1201775c61559a9d4db1e.exe	28
PID 896 wrote to memory of 1204	896	e5ddb5c1b9ba03f61bca2212436ec1036202e6ff2df1201775c61559a9d4db1e.exe	28
PID 896 wrote to memory of 1204	896	e5ddb5c1b9ba03f61bca2212436ec1036202e6ff2df1201775c61559a9d4db1e.exe	28
PID 896 wrote to memory of 1204	896	e5ddb5c1b9ba03f61bca2212436ec1036202e6ff2df1201775c61559a9d4db1e.exe	28
PID 896 wrote to memory of 1204	896	e5ddb5c1b9ba03f61bca2212436ec1036202e6ff2df1201775c61559a9d4db1e.exe	28
PID 896 wrote to memory of 1204	896	e5ddb5c1b9ba03f61bca2212436ec1036202e6ff2df1201775c61559a9d4db1e.exe	28
PID 896 wrote to memory of 1204	896	e5ddb5c1b9ba03f61bca2212436ec1036202e6ff2df1201775c61559a9d4db1e.exe	28

memory/896-54-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/896-55-0x0000000075E31000-0x0000000075E33000-memory.dmp

Filesize
8KB

Download
memory/896-60-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1204-56-0x0000000000400000-0x0000000000405000-memory.dmp

Filesize
20KB

Download
memory/1204-58-0x0000000000400000-0x0000000000405000-memory.dmp

Filesize
20KB

Download