5123464f02eb63e96e020c6c727185b62e53d894c96fb71901b2f491554120d4

Analysis

max time kernel
178s
max time network
182s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 19:39

Target

transact_store/transact_e5ebfdsd6211.exe
Size

58KB
MD5

182ee0f73cd9743985ceb3248400fd44
SHA1

a3be64e08d2190fc54c3732090e4888a2162578c
SHA256

8a23558f6b59c714495ad9753609f359bd025b6bb205b8ac00a7a84ed1372589
SHA512

6e0135ce9c715e95e3b3e4328d50a8b4822e9cde36d4e60b7c370dcb3892dfe4e08d6b201f4d60c3e33f37514179bf747fa37a475f4589e5b15280ac657fc262
SSDEEP

1536:cQCQKXujec19h2F0plccw9ZFvXR2dowZypaXTNSLO6:lFsh2pEdXR2IV

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2684 set thread context of 2532	2684	transact_e5ebfdsd6211.exe	83

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2684 wrote to memory of 2532	2684	transact_e5ebfdsd6211.exe	83
PID 2684 wrote to memory of 2532	2684	transact_e5ebfdsd6211.exe	83
PID 2684 wrote to memory of 2532	2684	transact_e5ebfdsd6211.exe	83
PID 2684 wrote to memory of 2532	2684	transact_e5ebfdsd6211.exe	83
PID 2684 wrote to memory of 2532	2684	transact_e5ebfdsd6211.exe	83
PID 2684 wrote to memory of 2532	2684	transact_e5ebfdsd6211.exe	83
PID 2684 wrote to memory of 2532	2684	transact_e5ebfdsd6211.exe	83

C:\Users\Admin\AppData\Local\Temp\transact_store\transact_e5ebfdsd6211.exe
"C:\Users\Admin\AppData\Local\Temp\transact_store\transact_e5ebfdsd6211.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:2684
- C:\Users\Admin\AppData\Local\Temp\transact_store\transact_e5ebfdsd6211.exe
  "C:\Users\Admin\AppData\Local\Temp\transact_store\transact_e5ebfdsd6211.exe"
  2⤵
  PID:2532

memory/2532-137-0x0000000000400000-0x0000000000405000-memory.dmp

Filesize
20KB

Download
memory/2684-132-0x00000000749C0000-0x0000000074F71000-memory.dmp

Filesize
5.7MB

Download
memory/2684-133-0x00000000009F6000-0x00000000009FB000-memory.dmp

Filesize
20KB

Download
memory/2684-135-0x00000000749C0000-0x0000000074F71000-memory.dmp

Filesize
5.7MB

Download
memory/2684-136-0x00000000009F6000-0x00000000009F9000-memory.dmp

Filesize
12KB

Download