94a0972299fce496766354b0b1516082546e1b4be6ad3d412c73f1a996177980

Analysis

max time kernel
172s
max time network
179s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
04/12/2022, 07:48

Target

94a0972299fce496766354b0b1516082546e1b4be6ad3d412c73f1a996177980.exe
Size

258KB
MD5

45fe16fe6102f03be05383fb6009c335
SHA1

8b6a58248c6968974a9542008041dc85bcd76b90
SHA256

94a0972299fce496766354b0b1516082546e1b4be6ad3d412c73f1a996177980
SHA512

9e47e114e37f4d535f303308212bd698090de86b660945157c9a504b56af19d5f120ffa29a849ffaed4fb9d5ee8ea28570dd95f89b9a2efa00b94edd66adc4a8
SSDEEP

6144:hpWsjilAKubzU4TJQHXbAl4UbaZA/Du0rGKqkT:hpWsjilAKubzUouHrRg/4DG

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2296 set thread context of 3588	2296	94a0972299fce496766354b0b1516082546e1b4be6ad3d412c73f1a996177980.exe	80

Suspicious behavior: EnumeratesProcesses 4 IoCs

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2296	94a0972299fce496766354b0b1516082546e1b4be6ad3d412c73f1a996177980.exe

Suspicious use of WriteProcessMemory 12 IoCs

description	pid	Process	procid_target
PID 2296 wrote to memory of 3588	2296	94a0972299fce496766354b0b1516082546e1b4be6ad3d412c73f1a996177980.exe	80
PID 2296 wrote to memory of 3588	2296	94a0972299fce496766354b0b1516082546e1b4be6ad3d412c73f1a996177980.exe	80
PID 2296 wrote to memory of 3588	2296	94a0972299fce496766354b0b1516082546e1b4be6ad3d412c73f1a996177980.exe	80
PID 2296 wrote to memory of 3588	2296	94a0972299fce496766354b0b1516082546e1b4be6ad3d412c73f1a996177980.exe	80
PID 2296 wrote to memory of 3588	2296	94a0972299fce496766354b0b1516082546e1b4be6ad3d412c73f1a996177980.exe	80
PID 2296 wrote to memory of 3588	2296	94a0972299fce496766354b0b1516082546e1b4be6ad3d412c73f1a996177980.exe	80
PID 3588 wrote to memory of 2976	3588	94a0972299fce496766354b0b1516082546e1b4be6ad3d412c73f1a996177980.exe	45
PID 3588 wrote to memory of 2976	3588	94a0972299fce496766354b0b1516082546e1b4be6ad3d412c73f1a996177980.exe	45
PID 3588 wrote to memory of 2976	3588	94a0972299fce496766354b0b1516082546e1b4be6ad3d412c73f1a996177980.exe	45
PID 3588 wrote to memory of 2976	3588	94a0972299fce496766354b0b1516082546e1b4be6ad3d412c73f1a996177980.exe	45
PID 3588 wrote to memory of 2976	3588	94a0972299fce496766354b0b1516082546e1b4be6ad3d412c73f1a996177980.exe	45
PID 3588 wrote to memory of 2976	3588	94a0972299fce496766354b0b1516082546e1b4be6ad3d412c73f1a996177980.exe	45

memory/2296-137-0x0000000000400000-0x000000000042F000-memory.dmp

Filesize
188KB

Download
memory/2976-141-0x000000007FFC0000-0x000000007FFC6000-memory.dmp

Filesize
24KB

Download
memory/3588-135-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/3588-138-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download
memory/3588-139-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download
memory/3588-140-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/3588-142-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download