7f70921cf1b60dd9feb1592be057060d122454bc28a4dc858817beede6f7defb

Analysis

max time kernel
155s
max time network
165s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
28/11/2022, 03:32

Target

7f70921cf1b60dd9feb1592be057060d122454bc28a4dc858817beede6f7defb.exe
Size

105KB
MD5

25398ac2c546b951dd60da43141aa6ef
SHA1

eba94012a7150bc9bdc6fc7d4aa45ab415df11d7
SHA256

7f70921cf1b60dd9feb1592be057060d122454bc28a4dc858817beede6f7defb
SHA512

370a4d04ae4fb4aef4f4b20c3a81a0d55da051934bc41834fb117e6297454a10d225431a649bbda5d03b3407d544842128da6ab8075e10a6cdf460a1beff0f7d
SSDEEP

3072:Vm9HLmcFgMGGiUdQwdIoPslW/N336MdMfLir1vP:Vm9rzFgMGp+dpVqqULirp

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 704 set thread context of 388	704	7f70921cf1b60dd9feb1592be057060d122454bc28a4dc858817beede6f7defb.exe	80

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
388	7f70921cf1b60dd9feb1592be057060d122454bc28a4dc858817beede6f7defb.exe
388	7f70921cf1b60dd9feb1592be057060d122454bc28a4dc858817beede6f7defb.exe
388	7f70921cf1b60dd9feb1592be057060d122454bc28a4dc858817beede6f7defb.exe
388	7f70921cf1b60dd9feb1592be057060d122454bc28a4dc858817beede6f7defb.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
704	7f70921cf1b60dd9feb1592be057060d122454bc28a4dc858817beede6f7defb.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 704 wrote to memory of 388	704	7f70921cf1b60dd9feb1592be057060d122454bc28a4dc858817beede6f7defb.exe	80
PID 704 wrote to memory of 388	704	7f70921cf1b60dd9feb1592be057060d122454bc28a4dc858817beede6f7defb.exe	80
PID 704 wrote to memory of 388	704	7f70921cf1b60dd9feb1592be057060d122454bc28a4dc858817beede6f7defb.exe	80
PID 704 wrote to memory of 388	704	7f70921cf1b60dd9feb1592be057060d122454bc28a4dc858817beede6f7defb.exe	80
PID 704 wrote to memory of 388	704	7f70921cf1b60dd9feb1592be057060d122454bc28a4dc858817beede6f7defb.exe	80
PID 704 wrote to memory of 388	704	7f70921cf1b60dd9feb1592be057060d122454bc28a4dc858817beede6f7defb.exe	80
PID 704 wrote to memory of 388	704	7f70921cf1b60dd9feb1592be057060d122454bc28a4dc858817beede6f7defb.exe	80
PID 388 wrote to memory of 2648	388	7f70921cf1b60dd9feb1592be057060d122454bc28a4dc858817beede6f7defb.exe	63
PID 388 wrote to memory of 2648	388	7f70921cf1b60dd9feb1592be057060d122454bc28a4dc858817beede6f7defb.exe	63
PID 388 wrote to memory of 2648	388	7f70921cf1b60dd9feb1592be057060d122454bc28a4dc858817beede6f7defb.exe	63
PID 388 wrote to memory of 2648	388	7f70921cf1b60dd9feb1592be057060d122454bc28a4dc858817beede6f7defb.exe	63

memory/388-135-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/388-138-0x0000000000400000-0x00000000004083A0-memory.dmp

Filesize
32KB

Download
memory/388-140-0x0000000010000000-0x0000000010012000-memory.dmp

Filesize
72KB

Download
memory/704-137-0x0000000000400000-0x000000000043F000-memory.dmp

Filesize
252KB

Download
memory/2648-139-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download