b12a27eaa57de7a073d1bc43d4b5647fb772bd291da45961bae3ebdfe990f0eb

Analysis

max time kernel
151s
max time network
196s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
03/12/2022, 21:44

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b12a27eaa57de7a073d1bc43d4b5647fb772bd291da45961bae3ebdfe990f0eb.exe
Size

416KB
MD5

beb826c8e10b4f18f011a4b3c90abbd2
SHA1

0ba021ad8a2f7f7500c548d783b72d1acc3ead1f
SHA256

b12a27eaa57de7a073d1bc43d4b5647fb772bd291da45961bae3ebdfe990f0eb
SHA512

311da459e0e3d7dcc5d53a6d88f0cf33e9b320f0cd6dc94f295fb4025f8554c42d5c568e0e4035bf5b0f50118410bc8e0e7964861fb5df905f609211bbb57480
SSDEEP

6144:RdZLtT4I4I5kKaOyjLg60UKRtXJ6tggEO6IfqaFy3yTJTP1lsZjigxEEL:RpbN5vjhR54EO6IfqQy3iJTP1lsRxEw

Score

5^/10

Malware Config

Signatures

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1920 set thread context of 4832	1920	b12a27eaa57de7a073d1bc43d4b5647fb772bd291da45961bae3ebdfe990f0eb.exe	82

Suspicious use of WriteProcessMemory 14 IoCs

description	pid	Process	procid_target
PID 1920 wrote to memory of 4832	1920	b12a27eaa57de7a073d1bc43d4b5647fb772bd291da45961bae3ebdfe990f0eb.exe	82
PID 1920 wrote to memory of 4832	1920	b12a27eaa57de7a073d1bc43d4b5647fb772bd291da45961bae3ebdfe990f0eb.exe	82
PID 1920 wrote to memory of 4832	1920	b12a27eaa57de7a073d1bc43d4b5647fb772bd291da45961bae3ebdfe990f0eb.exe	82
PID 1920 wrote to memory of 4832	1920	b12a27eaa57de7a073d1bc43d4b5647fb772bd291da45961bae3ebdfe990f0eb.exe	82
PID 1920 wrote to memory of 4832	1920	b12a27eaa57de7a073d1bc43d4b5647fb772bd291da45961bae3ebdfe990f0eb.exe	82
PID 1920 wrote to memory of 4832	1920	b12a27eaa57de7a073d1bc43d4b5647fb772bd291da45961bae3ebdfe990f0eb.exe	82
PID 1920 wrote to memory of 4832	1920	b12a27eaa57de7a073d1bc43d4b5647fb772bd291da45961bae3ebdfe990f0eb.exe	82
PID 1920 wrote to memory of 4832	1920	b12a27eaa57de7a073d1bc43d4b5647fb772bd291da45961bae3ebdfe990f0eb.exe	82
PID 1920 wrote to memory of 4832	1920	b12a27eaa57de7a073d1bc43d4b5647fb772bd291da45961bae3ebdfe990f0eb.exe	82
PID 1920 wrote to memory of 4832	1920	b12a27eaa57de7a073d1bc43d4b5647fb772bd291da45961bae3ebdfe990f0eb.exe	82
PID 1920 wrote to memory of 4832	1920	b12a27eaa57de7a073d1bc43d4b5647fb772bd291da45961bae3ebdfe990f0eb.exe	82
PID 1920 wrote to memory of 4832	1920	b12a27eaa57de7a073d1bc43d4b5647fb772bd291da45961bae3ebdfe990f0eb.exe	82
PID 1920 wrote to memory of 4832	1920	b12a27eaa57de7a073d1bc43d4b5647fb772bd291da45961bae3ebdfe990f0eb.exe	82
PID 1920 wrote to memory of 4832	1920	b12a27eaa57de7a073d1bc43d4b5647fb772bd291da45961bae3ebdfe990f0eb.exe	82

C:\Users\Admin\AppData\Local\Temp\b12a27eaa57de7a073d1bc43d4b5647fb772bd291da45961bae3ebdfe990f0eb.exe
"C:\Users\Admin\AppData\Local\Temp\b12a27eaa57de7a073d1bc43d4b5647fb772bd291da45961bae3ebdfe990f0eb.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:1920
- C:\Users\Admin\AppData\Local\Temp\b12a27eaa57de7a073d1bc43d4b5647fb772bd291da45961bae3ebdfe990f0eb.exe
  C:\Users\Admin\AppData\Local\Temp\b12a27eaa57de7a073d1bc43d4b5647fb772bd291da45961bae3ebdfe990f0eb.exe
  2⤵
  PID:4832

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4832-133-0x0000000000400000-0x000000000046C000-memory.dmp

Filesize
432KB

Download
memory/4832-134-0x0000000000400000-0x000000000046C000-memory.dmp

Filesize
432KB

Download
memory/4832-135-0x0000000000400000-0x000000000046C000-memory.dmp

Filesize
432KB

Download
memory/4832-137-0x0000000000400000-0x000000000046C000-memory.dmp

Filesize
432KB

Download
memory/4832-140-0x0000000000400000-0x000000000046C000-memory.dmp

Filesize
432KB

Download
memory/4832-139-0x0000000000400000-0x000000000046C000-memory.dmp

Filesize
432KB

Download
memory/4832-141-0x0000000000400000-0x000000000046C000-memory.dmp

Filesize
432KB

Download
memory/4832-143-0x0000000000400000-0x000000000046C000-memory.dmp

Filesize
432KB

Download
memory/4832-144-0x0000000000400000-0x000000000046C000-memory.dmp

Filesize
432KB

Download
memory/4832-145-0x0000000000401000-0x0000000000454000-memory.dmp

Filesize
332KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads