c35b5ba322b86a3c5c99043736390b529edc396467d08fa0f2ae6117658b23fb

Analysis

max time kernel
29s
max time network
34s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
03/12/2022, 17:25

Target

c35b5ba322b86a3c5c99043736390b529edc396467d08fa0f2ae6117658b23fb.exe
Size

70KB
MD5

c4a9f7e33dd27e911365676dc41fa23e
SHA1

aea8404c622e3e25cad7757d9f0bd9ed5c5d9575
SHA256

c35b5ba322b86a3c5c99043736390b529edc396467d08fa0f2ae6117658b23fb
SHA512

64607b0d1af783d335ac462f85040de99340aacc0429800d642dba7c7046049c4b5c88b3505ddc60672eda17c178a0fd57dc19be0a10dbfcb33119043697da76
SSDEEP

1536:ItdjgaKvSFr/2DgcgifMPvITVm20+74xEPBE3cV:sWDvSFr/2DHxMP2m2JE2

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2028 set thread context of 1716	2028	c35b5ba322b86a3c5c99043736390b529edc396467d08fa0f2ae6117658b23fb.exe	28

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1716	c35b5ba322b86a3c5c99043736390b529edc396467d08fa0f2ae6117658b23fb.exe
1716	c35b5ba322b86a3c5c99043736390b529edc396467d08fa0f2ae6117658b23fb.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2028 wrote to memory of 1716	2028	c35b5ba322b86a3c5c99043736390b529edc396467d08fa0f2ae6117658b23fb.exe	28
PID 2028 wrote to memory of 1716	2028	c35b5ba322b86a3c5c99043736390b529edc396467d08fa0f2ae6117658b23fb.exe	28
PID 2028 wrote to memory of 1716	2028	c35b5ba322b86a3c5c99043736390b529edc396467d08fa0f2ae6117658b23fb.exe	28
PID 2028 wrote to memory of 1716	2028	c35b5ba322b86a3c5c99043736390b529edc396467d08fa0f2ae6117658b23fb.exe	28
PID 2028 wrote to memory of 1716	2028	c35b5ba322b86a3c5c99043736390b529edc396467d08fa0f2ae6117658b23fb.exe	28
PID 2028 wrote to memory of 1716	2028	c35b5ba322b86a3c5c99043736390b529edc396467d08fa0f2ae6117658b23fb.exe	28
PID 2028 wrote to memory of 1716	2028	c35b5ba322b86a3c5c99043736390b529edc396467d08fa0f2ae6117658b23fb.exe	28
PID 1716 wrote to memory of 1248	1716	c35b5ba322b86a3c5c99043736390b529edc396467d08fa0f2ae6117658b23fb.exe	16
PID 1716 wrote to memory of 1248	1716	c35b5ba322b86a3c5c99043736390b529edc396467d08fa0f2ae6117658b23fb.exe	16
PID 1716 wrote to memory of 1248	1716	c35b5ba322b86a3c5c99043736390b529edc396467d08fa0f2ae6117658b23fb.exe	16
PID 1716 wrote to memory of 1248	1716	c35b5ba322b86a3c5c99043736390b529edc396467d08fa0f2ae6117658b23fb.exe	16

memory/1248-64-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/1716-55-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1716-56-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1716-58-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1716-59-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1716-62-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1716-67-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/1716-68-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2028-54-0x00000000760C1000-0x00000000760C3000-memory.dmp

Filesize
8KB

Download