41089baeb31c2b1b91d6c6c3440d785f907611ac0a6181b1493a7601ae2f3c3e

Analysis

max time kernel
90s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
29/11/2022, 15:11

Target

41089baeb31c2b1b91d6c6c3440d785f907611ac0a6181b1493a7601ae2f3c3e.exe
Size

106KB
MD5

7d5226e3376e69a98868e472e0a3c545
SHA1

60c1b80d5693b8aeef96b7188f7f9049d52b6d6b
SHA256

41089baeb31c2b1b91d6c6c3440d785f907611ac0a6181b1493a7601ae2f3c3e
SHA512

a74fc416d354a36e78af86c9563f9a27e4416a06b8bb9a88021e2f79406de7f9e678ed84bc92fdc249b138998ff95fccdec3b5390033130492fae1b6c34dbcad
SSDEEP

3072:DK1g0pyr1357M3IbcHjbgzO5QV3a9t5EnzX6u:6gZB8S89t5Enr6u

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2292 set thread context of 3540	2292	41089baeb31c2b1b91d6c6c3440d785f907611ac0a6181b1493a7601ae2f3c3e.exe	81

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3540	41089baeb31c2b1b91d6c6c3440d785f907611ac0a6181b1493a7601ae2f3c3e.exe
3540	41089baeb31c2b1b91d6c6c3440d785f907611ac0a6181b1493a7601ae2f3c3e.exe
3540	41089baeb31c2b1b91d6c6c3440d785f907611ac0a6181b1493a7601ae2f3c3e.exe
3540	41089baeb31c2b1b91d6c6c3440d785f907611ac0a6181b1493a7601ae2f3c3e.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2292 wrote to memory of 3540	2292	41089baeb31c2b1b91d6c6c3440d785f907611ac0a6181b1493a7601ae2f3c3e.exe	81
PID 2292 wrote to memory of 3540	2292	41089baeb31c2b1b91d6c6c3440d785f907611ac0a6181b1493a7601ae2f3c3e.exe	81
PID 2292 wrote to memory of 3540	2292	41089baeb31c2b1b91d6c6c3440d785f907611ac0a6181b1493a7601ae2f3c3e.exe	81
PID 2292 wrote to memory of 3540	2292	41089baeb31c2b1b91d6c6c3440d785f907611ac0a6181b1493a7601ae2f3c3e.exe	81
PID 2292 wrote to memory of 3540	2292	41089baeb31c2b1b91d6c6c3440d785f907611ac0a6181b1493a7601ae2f3c3e.exe	81
PID 2292 wrote to memory of 3540	2292	41089baeb31c2b1b91d6c6c3440d785f907611ac0a6181b1493a7601ae2f3c3e.exe	81
PID 2292 wrote to memory of 3540	2292	41089baeb31c2b1b91d6c6c3440d785f907611ac0a6181b1493a7601ae2f3c3e.exe	81
PID 3540 wrote to memory of 2736	3540	41089baeb31c2b1b91d6c6c3440d785f907611ac0a6181b1493a7601ae2f3c3e.exe	39
PID 3540 wrote to memory of 2736	3540	41089baeb31c2b1b91d6c6c3440d785f907611ac0a6181b1493a7601ae2f3c3e.exe	39
PID 3540 wrote to memory of 2736	3540	41089baeb31c2b1b91d6c6c3440d785f907611ac0a6181b1493a7601ae2f3c3e.exe	39
PID 3540 wrote to memory of 2736	3540	41089baeb31c2b1b91d6c6c3440d785f907611ac0a6181b1493a7601ae2f3c3e.exe	39

memory/2292-132-0x0000000074F90000-0x0000000075541000-memory.dmp

Filesize
5.7MB

Download
memory/2292-136-0x0000000074F90000-0x0000000075541000-memory.dmp

Filesize
5.7MB

Download
memory/2736-138-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/3540-134-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3540-137-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3540-139-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/3540-140-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download