815226e47c0108ee14f710af5fea2b16f4523241646bd9107c97be25c4b2185b

Analysis

max time kernel
42s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
01/12/2022, 08:47

Target

815226e47c0108ee14f710af5fea2b16f4523241646bd9107c97be25c4b2185b.exe
Size

69KB
MD5

fd90c41fd8b5bb2c7b95f8e500608e42
SHA1

7524a06e0c20e35f0317b747d37def12a348e57a
SHA256

815226e47c0108ee14f710af5fea2b16f4523241646bd9107c97be25c4b2185b
SHA512

997181d598bd1c05b3e665aed9e564f3d9d59e44153adef95e99f7ee6c2648b1f775875b399e6bceca987bbcadccd00ed5ca1819904336d4864cc8dbabfad629
SSDEEP

1536:UN1sNM1tBy+GlxfnXgS2kdn6Pj3g3eWRBJMEovlZSbCzKGOIeXCk:UNqNclGTfnX8k8j3uzRYjaGICk

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1948 set thread context of 1112	1948	815226e47c0108ee14f710af5fea2b16f4523241646bd9107c97be25c4b2185b.exe	27

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
1112	815226e47c0108ee14f710af5fea2b16f4523241646bd9107c97be25c4b2185b.exe

Suspicious use of WriteProcessMemory 13 IoCs

description	pid	Process	procid_target
PID 1948 wrote to memory of 1112	1948	815226e47c0108ee14f710af5fea2b16f4523241646bd9107c97be25c4b2185b.exe	27
PID 1948 wrote to memory of 1112	1948	815226e47c0108ee14f710af5fea2b16f4523241646bd9107c97be25c4b2185b.exe	27
PID 1948 wrote to memory of 1112	1948	815226e47c0108ee14f710af5fea2b16f4523241646bd9107c97be25c4b2185b.exe	27
PID 1948 wrote to memory of 1112	1948	815226e47c0108ee14f710af5fea2b16f4523241646bd9107c97be25c4b2185b.exe	27
PID 1948 wrote to memory of 1112	1948	815226e47c0108ee14f710af5fea2b16f4523241646bd9107c97be25c4b2185b.exe	27
PID 1948 wrote to memory of 1112	1948	815226e47c0108ee14f710af5fea2b16f4523241646bd9107c97be25c4b2185b.exe	27
PID 1948 wrote to memory of 1112	1948	815226e47c0108ee14f710af5fea2b16f4523241646bd9107c97be25c4b2185b.exe	27
PID 1112 wrote to memory of 1256	1112	815226e47c0108ee14f710af5fea2b16f4523241646bd9107c97be25c4b2185b.exe	15
PID 1112 wrote to memory of 1256	1112	815226e47c0108ee14f710af5fea2b16f4523241646bd9107c97be25c4b2185b.exe	15
PID 1112 wrote to memory of 1256	1112	815226e47c0108ee14f710af5fea2b16f4523241646bd9107c97be25c4b2185b.exe	15
PID 1112 wrote to memory of 1256	1112	815226e47c0108ee14f710af5fea2b16f4523241646bd9107c97be25c4b2185b.exe	15
PID 1112 wrote to memory of 1256	1112	815226e47c0108ee14f710af5fea2b16f4523241646bd9107c97be25c4b2185b.exe	15
PID 1112 wrote to memory of 1256	1112	815226e47c0108ee14f710af5fea2b16f4523241646bd9107c97be25c4b2185b.exe	15

memory/1112-54-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/1112-55-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/1112-57-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/1112-59-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/1112-62-0x0000000075F51000-0x0000000075F53000-memory.dmp

Filesize
8KB

Download
memory/1112-63-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/1112-64-0x0000000010000000-0x0000000010012000-memory.dmp

Filesize
72KB

Download
memory/1256-65-0x000000007EFC0000-0x000000007EFC6000-memory.dmp

Filesize
24KB

Download