dae60c22e66085bf36a4c25d17cb644b8bbf59b0a95d385e51b70088f668f1e0

Analysis

max time kernel
48s
max time network
34s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
29/11/2022, 16:56

Target

dae60c22e66085bf36a4c25d17cb644b8bbf59b0a95d385e51b70088f668f1e0.exe
Size

397KB
MD5

a1b46ed2b41ec940f050bd517d689595
SHA1

43bda5e5504797365a2107a8981852c72b00e083
SHA256

dae60c22e66085bf36a4c25d17cb644b8bbf59b0a95d385e51b70088f668f1e0
SHA512

b4987a9bf03f493b919cfc895ffac518c5412fac1c3a989991c576354d0cef9f1c63397f459a3e0ce34f29ecbaf65e48c99253e3fe6cd0e9220106d26eb54dff
SSDEEP

1536:fIjeOfQCfO1T94ZZBLnuYiiOP/jfxiJupBLZqCyE6IwCfhVbK2tvn:fsevdunBtirLfxi6BUswCpxK2tf

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1972 set thread context of 564	1972	dae60c22e66085bf36a4c25d17cb644b8bbf59b0a95d385e51b70088f668f1e0.exe	28

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
564	dae60c22e66085bf36a4c25d17cb644b8bbf59b0a95d385e51b70088f668f1e0.exe
564	dae60c22e66085bf36a4c25d17cb644b8bbf59b0a95d385e51b70088f668f1e0.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1972	dae60c22e66085bf36a4c25d17cb644b8bbf59b0a95d385e51b70088f668f1e0.exe

Suspicious use of WriteProcessMemory 12 IoCs

description	pid	Process	procid_target
PID 1972 wrote to memory of 564	1972	dae60c22e66085bf36a4c25d17cb644b8bbf59b0a95d385e51b70088f668f1e0.exe	28
PID 1972 wrote to memory of 564	1972	dae60c22e66085bf36a4c25d17cb644b8bbf59b0a95d385e51b70088f668f1e0.exe	28
PID 1972 wrote to memory of 564	1972	dae60c22e66085bf36a4c25d17cb644b8bbf59b0a95d385e51b70088f668f1e0.exe	28
PID 1972 wrote to memory of 564	1972	dae60c22e66085bf36a4c25d17cb644b8bbf59b0a95d385e51b70088f668f1e0.exe	28
PID 1972 wrote to memory of 564	1972	dae60c22e66085bf36a4c25d17cb644b8bbf59b0a95d385e51b70088f668f1e0.exe	28
PID 1972 wrote to memory of 564	1972	dae60c22e66085bf36a4c25d17cb644b8bbf59b0a95d385e51b70088f668f1e0.exe	28
PID 1972 wrote to memory of 564	1972	dae60c22e66085bf36a4c25d17cb644b8bbf59b0a95d385e51b70088f668f1e0.exe	28
PID 1972 wrote to memory of 564	1972	dae60c22e66085bf36a4c25d17cb644b8bbf59b0a95d385e51b70088f668f1e0.exe	28
PID 564 wrote to memory of 1208	564	dae60c22e66085bf36a4c25d17cb644b8bbf59b0a95d385e51b70088f668f1e0.exe	15
PID 564 wrote to memory of 1208	564	dae60c22e66085bf36a4c25d17cb644b8bbf59b0a95d385e51b70088f668f1e0.exe	15
PID 564 wrote to memory of 1208	564	dae60c22e66085bf36a4c25d17cb644b8bbf59b0a95d385e51b70088f668f1e0.exe	15
PID 564 wrote to memory of 1208	564	dae60c22e66085bf36a4c25d17cb644b8bbf59b0a95d385e51b70088f668f1e0.exe	15

memory/564-56-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/564-59-0x0000000000400000-0x00000000004083A0-memory.dmp

Filesize
32KB

Download
memory/564-60-0x00000000760D1000-0x00000000760D3000-memory.dmp

Filesize
8KB

Download
memory/564-64-0x0000000010000000-0x0000000010012000-memory.dmp

Filesize
72KB

Download
memory/1208-61-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download