45cdefcf7309513ab37ae29b2694cca9f85e9a3837c1ff0b3bb5d08cf3d6145d

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
21/11/2022, 20:30

Target

45cdefcf7309513ab37ae29b2694cca9f85e9a3837c1ff0b3bb5d08cf3d6145d.exe
Size

1.0MB
MD5

d9ba6f89747270b8dd59b14ee32e4730
SHA1

7372b7ea1430507abda98a94310298d435c2f214
SHA256

45cdefcf7309513ab37ae29b2694cca9f85e9a3837c1ff0b3bb5d08cf3d6145d
SHA512

4bcc773508191cf6c6ac9a4b09b7bda1c55e1e5892f2ddbe7b3446634fe6e9bae4a1f2444ff81be50f4ea35b88c32173e3360d0b636e1c5f428d8979bb9a39cc
SSDEEP

24576:oJ0FPl0XoDnqgEdhlaCT3xXGHRXjEuuMjM4jm6dVriAUli8WXHXlpk:oWFPaXGalaCTt8XjwoGji8b

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2516 set thread context of 728	2516	45cdefcf7309513ab37ae29b2694cca9f85e9a3837c1ff0b3bb5d08cf3d6145d.exe	83

Suspicious use of SetWindowsHookEx 5 IoCs

pid	Process
728	45cdefcf7309513ab37ae29b2694cca9f85e9a3837c1ff0b3bb5d08cf3d6145d.exe
728	45cdefcf7309513ab37ae29b2694cca9f85e9a3837c1ff0b3bb5d08cf3d6145d.exe
728	45cdefcf7309513ab37ae29b2694cca9f85e9a3837c1ff0b3bb5d08cf3d6145d.exe
728	45cdefcf7309513ab37ae29b2694cca9f85e9a3837c1ff0b3bb5d08cf3d6145d.exe
728	45cdefcf7309513ab37ae29b2694cca9f85e9a3837c1ff0b3bb5d08cf3d6145d.exe

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 2516 wrote to memory of 728	2516	45cdefcf7309513ab37ae29b2694cca9f85e9a3837c1ff0b3bb5d08cf3d6145d.exe	83
PID 2516 wrote to memory of 728	2516	45cdefcf7309513ab37ae29b2694cca9f85e9a3837c1ff0b3bb5d08cf3d6145d.exe	83
PID 2516 wrote to memory of 728	2516	45cdefcf7309513ab37ae29b2694cca9f85e9a3837c1ff0b3bb5d08cf3d6145d.exe	83
PID 2516 wrote to memory of 728	2516	45cdefcf7309513ab37ae29b2694cca9f85e9a3837c1ff0b3bb5d08cf3d6145d.exe	83
PID 2516 wrote to memory of 728	2516	45cdefcf7309513ab37ae29b2694cca9f85e9a3837c1ff0b3bb5d08cf3d6145d.exe	83
PID 2516 wrote to memory of 728	2516	45cdefcf7309513ab37ae29b2694cca9f85e9a3837c1ff0b3bb5d08cf3d6145d.exe	83
PID 2516 wrote to memory of 728	2516	45cdefcf7309513ab37ae29b2694cca9f85e9a3837c1ff0b3bb5d08cf3d6145d.exe	83
PID 2516 wrote to memory of 728	2516	45cdefcf7309513ab37ae29b2694cca9f85e9a3837c1ff0b3bb5d08cf3d6145d.exe	83
PID 2516 wrote to memory of 728	2516	45cdefcf7309513ab37ae29b2694cca9f85e9a3837c1ff0b3bb5d08cf3d6145d.exe	83
PID 2516 wrote to memory of 728	2516	45cdefcf7309513ab37ae29b2694cca9f85e9a3837c1ff0b3bb5d08cf3d6145d.exe	83

C:\Users\Admin\AppData\Local\Temp\45cdefcf7309513ab37ae29b2694cca9f85e9a3837c1ff0b3bb5d08cf3d6145d.exe
"C:\Users\Admin\AppData\Local\Temp\45cdefcf7309513ab37ae29b2694cca9f85e9a3837c1ff0b3bb5d08cf3d6145d.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:2516
- C:\Users\Admin\AppData\Local\Temp\45cdefcf7309513ab37ae29b2694cca9f85e9a3837c1ff0b3bb5d08cf3d6145d.exe
  2⤵
  - Suspicious use of SetWindowsHookEx
  PID:728

memory/728-133-0x0000000000400000-0x00000000004D8000-memory.dmp

Filesize
864KB

Download
memory/728-134-0x0000000000400000-0x00000000004D8000-memory.dmp

Filesize
864KB

Download
memory/728-135-0x0000000000400000-0x00000000004D8000-memory.dmp

Filesize
864KB

Download
memory/728-136-0x0000000000400000-0x00000000004D8000-memory.dmp

Filesize
864KB

Download
memory/728-137-0x0000000000400000-0x00000000004D8000-memory.dmp

Filesize
864KB

Download