41089baeb31c2b1b91d6c6c3440d785f907611ac0a6181b1493a7601ae2f3c3e

Analysis

max time kernel
34s
max time network
47s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
29/11/2022, 15:11

Target

41089baeb31c2b1b91d6c6c3440d785f907611ac0a6181b1493a7601ae2f3c3e.exe
Size

106KB
MD5

7d5226e3376e69a98868e472e0a3c545
SHA1

60c1b80d5693b8aeef96b7188f7f9049d52b6d6b
SHA256

41089baeb31c2b1b91d6c6c3440d785f907611ac0a6181b1493a7601ae2f3c3e
SHA512

a74fc416d354a36e78af86c9563f9a27e4416a06b8bb9a88021e2f79406de7f9e678ed84bc92fdc249b138998ff95fccdec3b5390033130492fae1b6c34dbcad
SSDEEP

3072:DK1g0pyr1357M3IbcHjbgzO5QV3a9t5EnzX6u:6gZB8S89t5Enr6u

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1692 set thread context of 1488	1692	41089baeb31c2b1b91d6c6c3440d785f907611ac0a6181b1493a7601ae2f3c3e.exe	28

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1488	41089baeb31c2b1b91d6c6c3440d785f907611ac0a6181b1493a7601ae2f3c3e.exe
1488	41089baeb31c2b1b91d6c6c3440d785f907611ac0a6181b1493a7601ae2f3c3e.exe

Suspicious use of WriteProcessMemory 12 IoCs

description	pid	Process	procid_target
PID 1692 wrote to memory of 1488	1692	41089baeb31c2b1b91d6c6c3440d785f907611ac0a6181b1493a7601ae2f3c3e.exe	28
PID 1692 wrote to memory of 1488	1692	41089baeb31c2b1b91d6c6c3440d785f907611ac0a6181b1493a7601ae2f3c3e.exe	28
PID 1692 wrote to memory of 1488	1692	41089baeb31c2b1b91d6c6c3440d785f907611ac0a6181b1493a7601ae2f3c3e.exe	28
PID 1692 wrote to memory of 1488	1692	41089baeb31c2b1b91d6c6c3440d785f907611ac0a6181b1493a7601ae2f3c3e.exe	28
PID 1692 wrote to memory of 1488	1692	41089baeb31c2b1b91d6c6c3440d785f907611ac0a6181b1493a7601ae2f3c3e.exe	28
PID 1692 wrote to memory of 1488	1692	41089baeb31c2b1b91d6c6c3440d785f907611ac0a6181b1493a7601ae2f3c3e.exe	28
PID 1692 wrote to memory of 1488	1692	41089baeb31c2b1b91d6c6c3440d785f907611ac0a6181b1493a7601ae2f3c3e.exe	28
PID 1692 wrote to memory of 1488	1692	41089baeb31c2b1b91d6c6c3440d785f907611ac0a6181b1493a7601ae2f3c3e.exe	28
PID 1488 wrote to memory of 1384	1488	41089baeb31c2b1b91d6c6c3440d785f907611ac0a6181b1493a7601ae2f3c3e.exe	16
PID 1488 wrote to memory of 1384	1488	41089baeb31c2b1b91d6c6c3440d785f907611ac0a6181b1493a7601ae2f3c3e.exe	16
PID 1488 wrote to memory of 1384	1488	41089baeb31c2b1b91d6c6c3440d785f907611ac0a6181b1493a7601ae2f3c3e.exe	16
PID 1488 wrote to memory of 1384	1488	41089baeb31c2b1b91d6c6c3440d785f907611ac0a6181b1493a7601ae2f3c3e.exe	16

memory/1384-65-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/1488-55-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1488-56-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1488-58-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1488-59-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1488-63-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1488-68-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/1488-69-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1692-54-0x0000000075921000-0x0000000075923000-memory.dmp

Filesize
8KB

Download
memory/1692-62-0x0000000074E90000-0x000000007543B000-memory.dmp

Filesize
5.7MB

Download