3399e45c3500a0891012e7d28610cf3de94bc0407d3c0cd5285754faf5cabd9f

Analysis

max time kernel
141s
max time network
163s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
21/11/2022, 18:40

Target

3399e45c3500a0891012e7d28610cf3de94bc0407d3c0cd5285754faf5cabd9f.exe
Size

1.2MB
MD5

dc3f64db73594648a35d80fe5a649bf3
SHA1

3b8901228d1d9bca6cd48498ae18868a581e2570
SHA256

3399e45c3500a0891012e7d28610cf3de94bc0407d3c0cd5285754faf5cabd9f
SHA512

0d655144d5ba9b6ad078df33b09d6a13a1ce44314f068ad86671bd01b28b80b76fae9d1155f5fb84b7a6486f7c9b1dcdd38ae577ba4d41dbe3ac32567cc8e66b
SSDEEP

24576:6MdktVSlvog5hp3gzBCsX1lq7xHZB0bTcpg9ZgYejEzOWa03NHI68mv:6MdkS6IsXkRX0bQEgYe709hR

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 3740 set thread context of 3380	3740	3399e45c3500a0891012e7d28610cf3de94bc0407d3c0cd5285754faf5cabd9f.exe	83

Suspicious use of SetWindowsHookEx 5 IoCs

pid	Process
3380	3399e45c3500a0891012e7d28610cf3de94bc0407d3c0cd5285754faf5cabd9f.exe
3380	3399e45c3500a0891012e7d28610cf3de94bc0407d3c0cd5285754faf5cabd9f.exe
3380	3399e45c3500a0891012e7d28610cf3de94bc0407d3c0cd5285754faf5cabd9f.exe
3380	3399e45c3500a0891012e7d28610cf3de94bc0407d3c0cd5285754faf5cabd9f.exe
3380	3399e45c3500a0891012e7d28610cf3de94bc0407d3c0cd5285754faf5cabd9f.exe

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 3740 wrote to memory of 3380	3740	3399e45c3500a0891012e7d28610cf3de94bc0407d3c0cd5285754faf5cabd9f.exe	83
PID 3740 wrote to memory of 3380	3740	3399e45c3500a0891012e7d28610cf3de94bc0407d3c0cd5285754faf5cabd9f.exe	83
PID 3740 wrote to memory of 3380	3740	3399e45c3500a0891012e7d28610cf3de94bc0407d3c0cd5285754faf5cabd9f.exe	83
PID 3740 wrote to memory of 3380	3740	3399e45c3500a0891012e7d28610cf3de94bc0407d3c0cd5285754faf5cabd9f.exe	83
PID 3740 wrote to memory of 3380	3740	3399e45c3500a0891012e7d28610cf3de94bc0407d3c0cd5285754faf5cabd9f.exe	83
PID 3740 wrote to memory of 3380	3740	3399e45c3500a0891012e7d28610cf3de94bc0407d3c0cd5285754faf5cabd9f.exe	83
PID 3740 wrote to memory of 3380	3740	3399e45c3500a0891012e7d28610cf3de94bc0407d3c0cd5285754faf5cabd9f.exe	83
PID 3740 wrote to memory of 3380	3740	3399e45c3500a0891012e7d28610cf3de94bc0407d3c0cd5285754faf5cabd9f.exe	83
PID 3740 wrote to memory of 3380	3740	3399e45c3500a0891012e7d28610cf3de94bc0407d3c0cd5285754faf5cabd9f.exe	83
PID 3740 wrote to memory of 3380	3740	3399e45c3500a0891012e7d28610cf3de94bc0407d3c0cd5285754faf5cabd9f.exe	83

C:\Users\Admin\AppData\Local\Temp\3399e45c3500a0891012e7d28610cf3de94bc0407d3c0cd5285754faf5cabd9f.exe
"C:\Users\Admin\AppData\Local\Temp\3399e45c3500a0891012e7d28610cf3de94bc0407d3c0cd5285754faf5cabd9f.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:3740
- C:\Users\Admin\AppData\Local\Temp\3399e45c3500a0891012e7d28610cf3de94bc0407d3c0cd5285754faf5cabd9f.exe
  2⤵
  - Suspicious use of SetWindowsHookEx
  PID:3380

memory/3380-134-0x0000000000400000-0x00000000004D8000-memory.dmp

Filesize
864KB

Download
memory/3380-133-0x0000000000400000-0x00000000004D8000-memory.dmp

Filesize
864KB

Download
memory/3380-135-0x0000000000400000-0x00000000004D8000-memory.dmp

Filesize
864KB

Download
memory/3380-136-0x0000000000400000-0x00000000004D8000-memory.dmp

Filesize
864KB

Download
memory/3380-137-0x0000000000400000-0x00000000004D8000-memory.dmp

Filesize
864KB

Download