4f0501d47b82348ddb9ccb6be2af5e23eaba210b9632915adb7524178707a1e2

Analysis

max time kernel
42s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
23-11-2022 21:27

Target

4f0501d47b82348ddb9ccb6be2af5e23eaba210b9632915adb7524178707a1e2.exe
Size

150KB
MD5

45efea6368e9617c88738149f5542c5a
SHA1

961d54c0e911badda0d4a8c2e575fc1003045fe7
SHA256

4f0501d47b82348ddb9ccb6be2af5e23eaba210b9632915adb7524178707a1e2
SHA512

4e53910038d5d27c25a67607992b602b04f9aab6af6dcea4bd66bbd5dbdacef547a416682619afdbee45b7c471ee6d7fd8ce6c7fd4f37211e92a324cd06a4054
SSDEEP

3072:IT4J2bv7sIvu8FJm60EljbD55+RYZm7lg0c3/POX5LPeFN9:XS7sID7ljbDOYB/Ie

Score

1^/10

Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes:

4f0501d47b82348ddb9ccb6be2af5e23eaba210b9632915adb7524178707a1e2.exe

pid process

1404 4f0501d47b82348ddb9ccb6be2af5e23eaba210b9632915adb7524178707a1e2.exe
Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

4f0501d47b82348ddb9ccb6be2af5e23eaba210b9632915adb7524178707a1e2.exe

pid process

1404 4f0501d47b82348ddb9ccb6be2af5e23eaba210b9632915adb7524178707a1e2.exe
Suspicious use of UnmapMainImage 1 IoCs

Processes:

4f0501d47b82348ddb9ccb6be2af5e23eaba210b9632915adb7524178707a1e2.exe

pid process

1404 4f0501d47b82348ddb9ccb6be2af5e23eaba210b9632915adb7524178707a1e2.exe

pid	process
1404	4f0501d47b82348ddb9ccb6be2af5e23eaba210b9632915adb7524178707a1e2.exe

pid	process
1404	4f0501d47b82348ddb9ccb6be2af5e23eaba210b9632915adb7524178707a1e2.exe

pid	process
1404	4f0501d47b82348ddb9ccb6be2af5e23eaba210b9632915adb7524178707a1e2.exe

Suspicious use of WriteProcessMemory 5 IoCs

Processes:

4f0501d47b82348ddb9ccb6be2af5e23eaba210b9632915adb7524178707a1e2.exe

description	pid	process	target process
PID 1404 wrote to memory of 1224	1404	4f0501d47b82348ddb9ccb6be2af5e23eaba210b9632915adb7524178707a1e2.exe	Explorer.EXE
PID 1404 wrote to memory of 1224	1404	4f0501d47b82348ddb9ccb6be2af5e23eaba210b9632915adb7524178707a1e2.exe	Explorer.EXE
PID 1404 wrote to memory of 1224	1404	4f0501d47b82348ddb9ccb6be2af5e23eaba210b9632915adb7524178707a1e2.exe	Explorer.EXE
PID 1404 wrote to memory of 1224	1404	4f0501d47b82348ddb9ccb6be2af5e23eaba210b9632915adb7524178707a1e2.exe	Explorer.EXE
PID 1404 wrote to memory of 1224	1404	4f0501d47b82348ddb9ccb6be2af5e23eaba210b9632915adb7524178707a1e2.exe	Explorer.EXE

memory/1404-54-0x0000000074F01000-0x0000000074F03000-memory.dmp

Filesize
8KB

Download
memory/1404-56-0x00000000003B0000-0x00000000003CD000-memory.dmp

Filesize
116KB

Download
memory/1404-55-0x00000000003A0000-0x00000000003A4000-memory.dmp

Filesize
16KB

Download
memory/1404-57-0x0000000000400000-0x0000000000427000-memory.dmp

Filesize
156KB

Download
memory/1404-58-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download