b7607c4617ba4dc191c3a327e76e44d1e1ab3327bdbb85f65b2cf7a35125e909

Analysis

max time kernel
112s
max time network
130s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
04-12-2022 02:28

Target

b7607c4617ba4dc191c3a327e76e44d1e1ab3327bdbb85f65b2cf7a35125e909.exe
Size

128KB
MD5

f29132496e3b1f5956bf9714c92ba1a3
SHA1

fc21d58afa3b3ae5770dab71ef806e5cdeef5df2
SHA256

b7607c4617ba4dc191c3a327e76e44d1e1ab3327bdbb85f65b2cf7a35125e909
SHA512

0fee2eefcbad515d09943265d9238cce8cd92d89163e1a27ea5435af318f54df3acea24d0222c4f68eca924f287edb82b8ebddf7fd2e7dcd4b343cae23947ee0
SSDEEP

1536:ME4LGOhKMYMgjHd9vNxRQJdofz0fwZvZW4wXpXSdX56LUAa7BRvRBzmbul:PZrk6f5Z6ZCdX56LoRvRNeG

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 4868 set thread context of 612	4868	b7607c4617ba4dc191c3a327e76e44d1e1ab3327bdbb85f65b2cf7a35125e909.exe	81

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
612	b7607c4617ba4dc191c3a327e76e44d1e1ab3327bdbb85f65b2cf7a35125e909.exe
612	b7607c4617ba4dc191c3a327e76e44d1e1ab3327bdbb85f65b2cf7a35125e909.exe
612	b7607c4617ba4dc191c3a327e76e44d1e1ab3327bdbb85f65b2cf7a35125e909.exe
612	b7607c4617ba4dc191c3a327e76e44d1e1ab3327bdbb85f65b2cf7a35125e909.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4868	b7607c4617ba4dc191c3a327e76e44d1e1ab3327bdbb85f65b2cf7a35125e909.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 4868 wrote to memory of 612	4868	b7607c4617ba4dc191c3a327e76e44d1e1ab3327bdbb85f65b2cf7a35125e909.exe	81
PID 4868 wrote to memory of 612	4868	b7607c4617ba4dc191c3a327e76e44d1e1ab3327bdbb85f65b2cf7a35125e909.exe	81
PID 4868 wrote to memory of 612	4868	b7607c4617ba4dc191c3a327e76e44d1e1ab3327bdbb85f65b2cf7a35125e909.exe	81
PID 4868 wrote to memory of 612	4868	b7607c4617ba4dc191c3a327e76e44d1e1ab3327bdbb85f65b2cf7a35125e909.exe	81
PID 4868 wrote to memory of 612	4868	b7607c4617ba4dc191c3a327e76e44d1e1ab3327bdbb85f65b2cf7a35125e909.exe	81
PID 4868 wrote to memory of 612	4868	b7607c4617ba4dc191c3a327e76e44d1e1ab3327bdbb85f65b2cf7a35125e909.exe	81
PID 4868 wrote to memory of 612	4868	b7607c4617ba4dc191c3a327e76e44d1e1ab3327bdbb85f65b2cf7a35125e909.exe	81
PID 612 wrote to memory of 2948	612	b7607c4617ba4dc191c3a327e76e44d1e1ab3327bdbb85f65b2cf7a35125e909.exe	59
PID 612 wrote to memory of 2948	612	b7607c4617ba4dc191c3a327e76e44d1e1ab3327bdbb85f65b2cf7a35125e909.exe	59
PID 612 wrote to memory of 2948	612	b7607c4617ba4dc191c3a327e76e44d1e1ab3327bdbb85f65b2cf7a35125e909.exe	59
PID 612 wrote to memory of 2948	612	b7607c4617ba4dc191c3a327e76e44d1e1ab3327bdbb85f65b2cf7a35125e909.exe	59

memory/612-134-0x0000000000000000-mapping.dmp

Download
memory/612-135-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/612-137-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/612-139-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/612-140-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/2948-138-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download