4732207be6d1e8b3e207bc7c39c4b29677365cb9a1b8d785ecd5250f2204b171

Analysis

max time kernel
148s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
23/11/2022, 18:12

Target

4732207be6d1e8b3e207bc7c39c4b29677365cb9a1b8d785ecd5250f2204b171.exe
Size

1.3MB
MD5

5f43d18d2466921be82837bc2a9cff3e
SHA1

979674197ae4b9dea07e237e2722dd8c73a73e7d
SHA256

4732207be6d1e8b3e207bc7c39c4b29677365cb9a1b8d785ecd5250f2204b171
SHA512

869c0f998b48369cf624228202d2ac61bc71bce59a18f29077ba7c61912f54b5d13e27271d8ea8584960a13fde33103cf5e368289ec514713ecf34eff4cdffde
SSDEEP

24576:euq2tmafPHRCOfLIRT26ULQX+llih7yzs905h0OsYOl9ooM3hGrBswDNgG:EaHPixOa9puO

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2248 set thread context of 2084	2248	4732207be6d1e8b3e207bc7c39c4b29677365cb9a1b8d785ecd5250f2204b171.exe	79

Suspicious use of SetWindowsHookEx 5 IoCs

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 2248 wrote to memory of 2084	2248	4732207be6d1e8b3e207bc7c39c4b29677365cb9a1b8d785ecd5250f2204b171.exe	79
PID 2248 wrote to memory of 2084	2248	4732207be6d1e8b3e207bc7c39c4b29677365cb9a1b8d785ecd5250f2204b171.exe	79
PID 2248 wrote to memory of 2084	2248	4732207be6d1e8b3e207bc7c39c4b29677365cb9a1b8d785ecd5250f2204b171.exe	79
PID 2248 wrote to memory of 2084	2248	4732207be6d1e8b3e207bc7c39c4b29677365cb9a1b8d785ecd5250f2204b171.exe	79
PID 2248 wrote to memory of 2084	2248	4732207be6d1e8b3e207bc7c39c4b29677365cb9a1b8d785ecd5250f2204b171.exe	79
PID 2248 wrote to memory of 2084	2248	4732207be6d1e8b3e207bc7c39c4b29677365cb9a1b8d785ecd5250f2204b171.exe	79
PID 2248 wrote to memory of 2084	2248	4732207be6d1e8b3e207bc7c39c4b29677365cb9a1b8d785ecd5250f2204b171.exe	79
PID 2248 wrote to memory of 2084	2248	4732207be6d1e8b3e207bc7c39c4b29677365cb9a1b8d785ecd5250f2204b171.exe	79
PID 2248 wrote to memory of 2084	2248	4732207be6d1e8b3e207bc7c39c4b29677365cb9a1b8d785ecd5250f2204b171.exe	79
PID 2248 wrote to memory of 2084	2248	4732207be6d1e8b3e207bc7c39c4b29677365cb9a1b8d785ecd5250f2204b171.exe	79

C:\Users\Admin\AppData\Local\Temp\4732207be6d1e8b3e207bc7c39c4b29677365cb9a1b8d785ecd5250f2204b171.exe
"C:\Users\Admin\AppData\Local\Temp\4732207be6d1e8b3e207bc7c39c4b29677365cb9a1b8d785ecd5250f2204b171.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:2248
- C:\Users\Admin\AppData\Local\Temp\4732207be6d1e8b3e207bc7c39c4b29677365cb9a1b8d785ecd5250f2204b171.exe
  "C:\Users\Admin\AppData\Local\Temp\4732207be6d1e8b3e207bc7c39c4b29677365cb9a1b8d785ecd5250f2204b171.exe"
  2⤵
  - Suspicious use of SetWindowsHookEx
  PID:2084

memory/2084-134-0x0000000000400000-0x00000000004E7000-memory.dmp

Filesize
924KB

Download
memory/2084-133-0x0000000000400000-0x00000000004E7000-memory.dmp

Filesize
924KB

Download
memory/2084-135-0x0000000000400000-0x00000000004E7000-memory.dmp

Filesize
924KB

Download
memory/2084-136-0x0000000000400000-0x00000000004E7000-memory.dmp

Filesize
924KB

Download
memory/2084-137-0x0000000000400000-0x00000000004E7000-memory.dmp

Filesize
924KB

Download