ee153741e515f335270dbac4e7b98b0ff70cbb4b45b54ffb7dfa35633ea23971

Analysis

max time kernel
151s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 12:45

Target

ee153741e515f335270dbac4e7b98b0ff70cbb4b45b54ffb7dfa35633ea23971.exe
Size

415KB
MD5

ae4cadd3a585a32dac99fedb3b251397
SHA1

8f1c426ae1b41486eaf735ec7a3e2438d64eca33
SHA256

ee153741e515f335270dbac4e7b98b0ff70cbb4b45b54ffb7dfa35633ea23971
SHA512

1a674e5e0df93b26627cd22a8966743685a2b612e891b06bbad6e3d6a76267b60eab9956bb2c0360701058407edd71ef1bd08cca2a57fcf2ecd513d7aa88f316
SSDEEP

12288:dTwG/rYVm867rVGCCyiz0P/U0m+Xh3Jj92U3+6I+j7vFMYwWQ2s9jTh7:uGjYM5VGCCyiz0P/U0m+Xh3Jpt+6x/vs

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

Processes:

ee153741e515f335270dbac4e7b98b0ff70cbb4b45b54ffb7dfa35633ea23971.exe

description	pid	process	target process
PID 852 set thread context of 5028	852	ee153741e515f335270dbac4e7b98b0ff70cbb4b45b54ffb7dfa35633ea23971.exe	ee153741e515f335270dbac4e7b98b0ff70cbb4b45b54ffb7dfa35633ea23971.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes:

ee153741e515f335270dbac4e7b98b0ff70cbb4b45b54ffb7dfa35633ea23971.exe

pid	process
852	ee153741e515f335270dbac4e7b98b0ff70cbb4b45b54ffb7dfa35633ea23971.exe
852	ee153741e515f335270dbac4e7b98b0ff70cbb4b45b54ffb7dfa35633ea23971.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

ee153741e515f335270dbac4e7b98b0ff70cbb4b45b54ffb7dfa35633ea23971.exe

description pid process

Token: SeDebugPrivilege 852 ee153741e515f335270dbac4e7b98b0ff70cbb4b45b54ffb7dfa35633ea23971.exe

description	pid	process
Token: SeDebugPrivilege	852	ee153741e515f335270dbac4e7b98b0ff70cbb4b45b54ffb7dfa35633ea23971.exe

Suspicious use of WriteProcessMemory 8 IoCs

Processes:

ee153741e515f335270dbac4e7b98b0ff70cbb4b45b54ffb7dfa35633ea23971.exe

description	pid	process	target process
PID 852 wrote to memory of 5028	852	ee153741e515f335270dbac4e7b98b0ff70cbb4b45b54ffb7dfa35633ea23971.exe	ee153741e515f335270dbac4e7b98b0ff70cbb4b45b54ffb7dfa35633ea23971.exe
PID 852 wrote to memory of 5028	852	ee153741e515f335270dbac4e7b98b0ff70cbb4b45b54ffb7dfa35633ea23971.exe	ee153741e515f335270dbac4e7b98b0ff70cbb4b45b54ffb7dfa35633ea23971.exe
PID 852 wrote to memory of 5028	852	ee153741e515f335270dbac4e7b98b0ff70cbb4b45b54ffb7dfa35633ea23971.exe	ee153741e515f335270dbac4e7b98b0ff70cbb4b45b54ffb7dfa35633ea23971.exe
PID 852 wrote to memory of 5028	852	ee153741e515f335270dbac4e7b98b0ff70cbb4b45b54ffb7dfa35633ea23971.exe	ee153741e515f335270dbac4e7b98b0ff70cbb4b45b54ffb7dfa35633ea23971.exe
PID 852 wrote to memory of 5028	852	ee153741e515f335270dbac4e7b98b0ff70cbb4b45b54ffb7dfa35633ea23971.exe	ee153741e515f335270dbac4e7b98b0ff70cbb4b45b54ffb7dfa35633ea23971.exe
PID 852 wrote to memory of 5028	852	ee153741e515f335270dbac4e7b98b0ff70cbb4b45b54ffb7dfa35633ea23971.exe	ee153741e515f335270dbac4e7b98b0ff70cbb4b45b54ffb7dfa35633ea23971.exe
PID 852 wrote to memory of 5028	852	ee153741e515f335270dbac4e7b98b0ff70cbb4b45b54ffb7dfa35633ea23971.exe	ee153741e515f335270dbac4e7b98b0ff70cbb4b45b54ffb7dfa35633ea23971.exe
PID 852 wrote to memory of 5028	852	ee153741e515f335270dbac4e7b98b0ff70cbb4b45b54ffb7dfa35633ea23971.exe	ee153741e515f335270dbac4e7b98b0ff70cbb4b45b54ffb7dfa35633ea23971.exe

C:\Users\Admin\AppData\Local\Temp\ee153741e515f335270dbac4e7b98b0ff70cbb4b45b54ffb7dfa35633ea23971.exe
"C:\Users\Admin\AppData\Local\Temp\ee153741e515f335270dbac4e7b98b0ff70cbb4b45b54ffb7dfa35633ea23971.exe"
2⤵
PID:5028

memory/852-132-0x0000000075340000-0x00000000758F1000-memory.dmp

Filesize
5.7MB

Download
memory/852-137-0x0000000075340000-0x00000000758F1000-memory.dmp

Filesize
5.7MB

Download
memory/5028-133-0x0000000000000000-mapping.dmp

Download
memory/5028-134-0x0000000000400000-0x0000000000427000-memory.dmp

Filesize
156KB

Download
memory/5028-136-0x0000000000400000-0x0000000000427000-memory.dmp

Filesize
156KB

Download
memory/5028-138-0x0000000000400000-0x0000000000427000-memory.dmp

Filesize
156KB

Download