a8bcf212783bd87458029a59ebcdee20d2e19b33944d1c8a97709add25cc260d

Analysis

max time kernel
138s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
03/12/2022, 11:08

Target

a8bcf212783bd87458029a59ebcdee20d2e19b33944d1c8a97709add25cc260d.exe
Size

526KB
MD5

88aa7176c7082db20d808124ac4d8073
SHA1

f192e7dca0c17008d355b479d1cd990a0c3a2b66
SHA256

a8bcf212783bd87458029a59ebcdee20d2e19b33944d1c8a97709add25cc260d
SHA512

62c9cd564f1db91f2ca3c52ea84997c1084b65ce8e53951742e56ad2a104cb08cbb6901cb574391b49b9d0ced181553c1337835d8af5b80cabc10dce3bb9f6f3
SSDEEP

12288:vclI8b0SNmHoriK/wSbErEqhE4JmpVhkrH:UlI8AOrsGJ4Jm5Y

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 4112 set thread context of 3836	4112	a8bcf212783bd87458029a59ebcdee20d2e19b33944d1c8a97709add25cc260d.exe	79

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3836	a8bcf212783bd87458029a59ebcdee20d2e19b33944d1c8a97709add25cc260d.exe
3836	a8bcf212783bd87458029a59ebcdee20d2e19b33944d1c8a97709add25cc260d.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4112	a8bcf212783bd87458029a59ebcdee20d2e19b33944d1c8a97709add25cc260d.exe

Suspicious use of WriteProcessMemory 13 IoCs

description	pid	Process	procid_target
PID 4112 wrote to memory of 3836	4112	a8bcf212783bd87458029a59ebcdee20d2e19b33944d1c8a97709add25cc260d.exe	79
PID 4112 wrote to memory of 3836	4112	a8bcf212783bd87458029a59ebcdee20d2e19b33944d1c8a97709add25cc260d.exe	79
PID 4112 wrote to memory of 3836	4112	a8bcf212783bd87458029a59ebcdee20d2e19b33944d1c8a97709add25cc260d.exe	79
PID 4112 wrote to memory of 3836	4112	a8bcf212783bd87458029a59ebcdee20d2e19b33944d1c8a97709add25cc260d.exe	79
PID 4112 wrote to memory of 3836	4112	a8bcf212783bd87458029a59ebcdee20d2e19b33944d1c8a97709add25cc260d.exe	79
PID 4112 wrote to memory of 3836	4112	a8bcf212783bd87458029a59ebcdee20d2e19b33944d1c8a97709add25cc260d.exe	79
PID 4112 wrote to memory of 3836	4112	a8bcf212783bd87458029a59ebcdee20d2e19b33944d1c8a97709add25cc260d.exe	79
PID 3836 wrote to memory of 2596	3836	a8bcf212783bd87458029a59ebcdee20d2e19b33944d1c8a97709add25cc260d.exe	28
PID 3836 wrote to memory of 2596	3836	a8bcf212783bd87458029a59ebcdee20d2e19b33944d1c8a97709add25cc260d.exe	28
PID 3836 wrote to memory of 2596	3836	a8bcf212783bd87458029a59ebcdee20d2e19b33944d1c8a97709add25cc260d.exe	28
PID 3836 wrote to memory of 2596	3836	a8bcf212783bd87458029a59ebcdee20d2e19b33944d1c8a97709add25cc260d.exe	28
PID 3836 wrote to memory of 2596	3836	a8bcf212783bd87458029a59ebcdee20d2e19b33944d1c8a97709add25cc260d.exe	28
PID 3836 wrote to memory of 2596	3836	a8bcf212783bd87458029a59ebcdee20d2e19b33944d1c8a97709add25cc260d.exe	28

memory/2596-139-0x000000007FFC0000-0x000000007FFC6000-memory.dmp

Filesize
24KB

Download
memory/3836-136-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/3836-140-0x0000000010000000-0x0000000010012000-memory.dmp

Filesize
72KB

Download
memory/3836-141-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/4112-132-0x0000000000400000-0x000000000046E000-memory.dmp

Filesize
440KB

Download
memory/4112-138-0x0000000000400000-0x000000000046E000-memory.dmp

Filesize
440KB

Download