8c2395413e148863fec1f1cee4b1754b7c45ae5c9ee4741d82dda265793e7af1

Analysis

max time kernel
142s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
02/12/2022, 20:50

Target

8c2395413e148863fec1f1cee4b1754b7c45ae5c9ee4741d82dda265793e7af1.exe
Size

200KB
MD5

53fbacb880aef2dfb88e37e1766f7f05
SHA1

71dda6289c48c14f97a79ad929b26bd081008540
SHA256

8c2395413e148863fec1f1cee4b1754b7c45ae5c9ee4741d82dda265793e7af1
SHA512

26241c0b2fe99ffbf4fef420ba012eda500d028198c657f91f254d0e9b09cf9fd1789098e993d817df65c148bb2d43d6f61a20f6c4149d62d79040f4b02cc2b9
SSDEEP

3072:0yQyC2ixjC/aFVjMH9XlYceC0hBfI4gDNTO80i2PAsMP:CzVcQjMH96cenBfI4CNq3nPu

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1312 set thread context of 2284	1312	8c2395413e148863fec1f1cee4b1754b7c45ae5c9ee4741d82dda265793e7af1.exe	80

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
2284	8c2395413e148863fec1f1cee4b1754b7c45ae5c9ee4741d82dda265793e7af1.exe
2284	8c2395413e148863fec1f1cee4b1754b7c45ae5c9ee4741d82dda265793e7af1.exe
2284	8c2395413e148863fec1f1cee4b1754b7c45ae5c9ee4741d82dda265793e7af1.exe
2284	8c2395413e148863fec1f1cee4b1754b7c45ae5c9ee4741d82dda265793e7af1.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1312	8c2395413e148863fec1f1cee4b1754b7c45ae5c9ee4741d82dda265793e7af1.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 1312 wrote to memory of 2284	1312	8c2395413e148863fec1f1cee4b1754b7c45ae5c9ee4741d82dda265793e7af1.exe	80
PID 1312 wrote to memory of 2284	1312	8c2395413e148863fec1f1cee4b1754b7c45ae5c9ee4741d82dda265793e7af1.exe	80
PID 1312 wrote to memory of 2284	1312	8c2395413e148863fec1f1cee4b1754b7c45ae5c9ee4741d82dda265793e7af1.exe	80
PID 1312 wrote to memory of 2284	1312	8c2395413e148863fec1f1cee4b1754b7c45ae5c9ee4741d82dda265793e7af1.exe	80
PID 1312 wrote to memory of 2284	1312	8c2395413e148863fec1f1cee4b1754b7c45ae5c9ee4741d82dda265793e7af1.exe	80
PID 1312 wrote to memory of 2284	1312	8c2395413e148863fec1f1cee4b1754b7c45ae5c9ee4741d82dda265793e7af1.exe	80
PID 1312 wrote to memory of 2284	1312	8c2395413e148863fec1f1cee4b1754b7c45ae5c9ee4741d82dda265793e7af1.exe	80
PID 2284 wrote to memory of 2560	2284	8c2395413e148863fec1f1cee4b1754b7c45ae5c9ee4741d82dda265793e7af1.exe	54
PID 2284 wrote to memory of 2560	2284	8c2395413e148863fec1f1cee4b1754b7c45ae5c9ee4741d82dda265793e7af1.exe	54
PID 2284 wrote to memory of 2560	2284	8c2395413e148863fec1f1cee4b1754b7c45ae5c9ee4741d82dda265793e7af1.exe	54
PID 2284 wrote to memory of 2560	2284	8c2395413e148863fec1f1cee4b1754b7c45ae5c9ee4741d82dda265793e7af1.exe	54

memory/1312-137-0x0000000000400000-0x0000000000477000-memory.dmp

Filesize
476KB

Download
memory/2284-135-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2284-138-0x0000000000400000-0x0000000000408960-memory.dmp

Filesize
34KB

Download
memory/2284-140-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/2560-139-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download