ae43ad6d622c5e47259775dda7fd7cb8cc81685c1ec76f1149f82abb7c01b1b9

Analysis

max time kernel
13s
max time network
27s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
25/11/2022, 17:48

Target

2014_11details_transaktion_379000200929_november_309083200059_11_0000000039.exe
Size

176KB
MD5

8e9f821390b3affa596053cbadc4e824
SHA1

cd2fc0abfa71caf23bd71debad20a4715c6f9edf
SHA256

d0eba3801e3a1aa54315098cdc246086b51c6a5818377c9521a968c8fcf31dac
SHA512

13e5aa6db26fb086f9ee191cf7306b4e1db884a6746d74901ecb81c9c0ebc905d4022c38e7f608c2f8c3dc15e439e64c873e638b908406537e94ffb0fe672030
SSDEEP

3072:T9fHcmI+0MEJRSDOWHQKjEukcqRiGl7ITMsvDWhjWxB50G2eaNLw1hKeW8SaP3/1:TpH8DNJwOxvukJHl0TTvDWcB50tNLwX9

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2732 set thread context of 4140	2732	2014_11details_transaktion_379000200929_november_309083200059_11_0000000039.exe	80

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2732	2014_11details_transaktion_379000200929_november_309083200059_11_0000000039.exe
2732	2014_11details_transaktion_379000200929_november_309083200059_11_0000000039.exe
2732	2014_11details_transaktion_379000200929_november_309083200059_11_0000000039.exe
2732	2014_11details_transaktion_379000200929_november_309083200059_11_0000000039.exe
2732	2014_11details_transaktion_379000200929_november_309083200059_11_0000000039.exe
2732	2014_11details_transaktion_379000200929_november_309083200059_11_0000000039.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2732	2014_11details_transaktion_379000200929_november_309083200059_11_0000000039.exe
2732	2014_11details_transaktion_379000200929_november_309083200059_11_0000000039.exe

Suspicious use of WriteProcessMemory 12 IoCs

description	pid	Process	procid_target
PID 2732 wrote to memory of 4140	2732	2014_11details_transaktion_379000200929_november_309083200059_11_0000000039.exe	80
PID 2732 wrote to memory of 4140	2732	2014_11details_transaktion_379000200929_november_309083200059_11_0000000039.exe	80
PID 2732 wrote to memory of 4140	2732	2014_11details_transaktion_379000200929_november_309083200059_11_0000000039.exe	80
PID 2732 wrote to memory of 4140	2732	2014_11details_transaktion_379000200929_november_309083200059_11_0000000039.exe	80
PID 2732 wrote to memory of 4140	2732	2014_11details_transaktion_379000200929_november_309083200059_11_0000000039.exe	80
PID 2732 wrote to memory of 4140	2732	2014_11details_transaktion_379000200929_november_309083200059_11_0000000039.exe	80
PID 2732 wrote to memory of 4140	2732	2014_11details_transaktion_379000200929_november_309083200059_11_0000000039.exe	80
PID 2732 wrote to memory of 4140	2732	2014_11details_transaktion_379000200929_november_309083200059_11_0000000039.exe	80
PID 2732 wrote to memory of 4140	2732	2014_11details_transaktion_379000200929_november_309083200059_11_0000000039.exe	80
PID 4140 wrote to memory of 5028	4140	2014_11details_transaktion_379000200929_november_309083200059_11_0000000039.exe	81
PID 4140 wrote to memory of 5028	4140	2014_11details_transaktion_379000200929_november_309083200059_11_0000000039.exe	81
PID 4140 wrote to memory of 5028	4140	2014_11details_transaktion_379000200929_november_309083200059_11_0000000039.exe	81

memory/2732-135-0x0000000002290000-0x0000000002294000-memory.dmp

Filesize
16KB

Download
memory/4140-133-0x0000000000400000-0x0000000000412000-memory.dmp

Filesize
72KB

Download
memory/4140-136-0x0000000000400000-0x0000000000412000-memory.dmp

Filesize
72KB

Download