dc8dbe5419fca2cb425f07804ff3a6cead8c17e442423bd3ad9a2d4182d2ee14

Analysis

max time kernel
155s
max time network
160s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
24/11/2022, 11:10

Target

dc8dbe5419fca2cb425f07804ff3a6cead8c17e442423bd3ad9a2d4182d2ee14.exe
Size

1.3MB
MD5

70f0262bc4461e17930cc1febc640a77
SHA1

fca86a02112dc51674d02beda5f2874d03163d3b
SHA256

dc8dbe5419fca2cb425f07804ff3a6cead8c17e442423bd3ad9a2d4182d2ee14
SHA512

c8a10f0ba42d696aaae99d9d0ba323c85d6f4d772d5e34d7167e8be34c670d1e3291e5ffbdcb9bb50291dcbc6c321a2b4a722559de45d236631c97130db5380e
SSDEEP

24576:7rKqlGCPcJKwybUDwEZZODYmR9G+gnbkk6XRJfe3DqYO/KpLwFfngWX4VmJPakE:7rKo4ZwCOnYjVmJPa/

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 4616 set thread context of 924	4616	dc8dbe5419fca2cb425f07804ff3a6cead8c17e442423bd3ad9a2d4182d2ee14.exe	80

Suspicious use of SetWindowsHookEx 5 IoCs

pid	Process
924	dc8dbe5419fca2cb425f07804ff3a6cead8c17e442423bd3ad9a2d4182d2ee14.exe
924	dc8dbe5419fca2cb425f07804ff3a6cead8c17e442423bd3ad9a2d4182d2ee14.exe
924	dc8dbe5419fca2cb425f07804ff3a6cead8c17e442423bd3ad9a2d4182d2ee14.exe
924	dc8dbe5419fca2cb425f07804ff3a6cead8c17e442423bd3ad9a2d4182d2ee14.exe
924	dc8dbe5419fca2cb425f07804ff3a6cead8c17e442423bd3ad9a2d4182d2ee14.exe

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 4616 wrote to memory of 924	4616	dc8dbe5419fca2cb425f07804ff3a6cead8c17e442423bd3ad9a2d4182d2ee14.exe	80
PID 4616 wrote to memory of 924	4616	dc8dbe5419fca2cb425f07804ff3a6cead8c17e442423bd3ad9a2d4182d2ee14.exe	80
PID 4616 wrote to memory of 924	4616	dc8dbe5419fca2cb425f07804ff3a6cead8c17e442423bd3ad9a2d4182d2ee14.exe	80
PID 4616 wrote to memory of 924	4616	dc8dbe5419fca2cb425f07804ff3a6cead8c17e442423bd3ad9a2d4182d2ee14.exe	80
PID 4616 wrote to memory of 924	4616	dc8dbe5419fca2cb425f07804ff3a6cead8c17e442423bd3ad9a2d4182d2ee14.exe	80
PID 4616 wrote to memory of 924	4616	dc8dbe5419fca2cb425f07804ff3a6cead8c17e442423bd3ad9a2d4182d2ee14.exe	80
PID 4616 wrote to memory of 924	4616	dc8dbe5419fca2cb425f07804ff3a6cead8c17e442423bd3ad9a2d4182d2ee14.exe	80
PID 4616 wrote to memory of 924	4616	dc8dbe5419fca2cb425f07804ff3a6cead8c17e442423bd3ad9a2d4182d2ee14.exe	80
PID 4616 wrote to memory of 924	4616	dc8dbe5419fca2cb425f07804ff3a6cead8c17e442423bd3ad9a2d4182d2ee14.exe	80
PID 4616 wrote to memory of 924	4616	dc8dbe5419fca2cb425f07804ff3a6cead8c17e442423bd3ad9a2d4182d2ee14.exe	80

C:\Users\Admin\AppData\Local\Temp\dc8dbe5419fca2cb425f07804ff3a6cead8c17e442423bd3ad9a2d4182d2ee14.exe
"C:\Users\Admin\AppData\Local\Temp\dc8dbe5419fca2cb425f07804ff3a6cead8c17e442423bd3ad9a2d4182d2ee14.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:4616
- C:\Users\Admin\AppData\Local\Temp\dc8dbe5419fca2cb425f07804ff3a6cead8c17e442423bd3ad9a2d4182d2ee14.exe
  2⤵
  - Suspicious use of SetWindowsHookEx
  PID:924

memory/924-133-0x0000000000400000-0x00000000004D9000-memory.dmp

Filesize
868KB

Download
memory/924-134-0x0000000000400000-0x00000000004D9000-memory.dmp

Filesize
868KB

Download
memory/924-135-0x0000000000400000-0x00000000004D9000-memory.dmp

Filesize
868KB

Download
memory/924-136-0x0000000000400000-0x00000000004D9000-memory.dmp

Filesize
868KB

Download
memory/924-137-0x0000000000400000-0x00000000004D9000-memory.dmp

Filesize
868KB

Download
memory/924-138-0x0000000000400000-0x00000000004D9000-memory.dmp

Filesize
868KB

Download