d6a8f5ed5f6f7c43f78f96ae4545bbb960de3ba39822af6337b6c08e1abd20f4

Analysis

max time kernel
44s
max time network
49s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
04/12/2022, 08:51

Target

d6a8f5ed5f6f7c43f78f96ae4545bbb960de3ba39822af6337b6c08e1abd20f4.exe
Size

388KB
MD5

7096f95f174ba9b0f0592b78c307f13d
SHA1

80d0606a9937d14dddebd5034fce98750780ba68
SHA256

d6a8f5ed5f6f7c43f78f96ae4545bbb960de3ba39822af6337b6c08e1abd20f4
SHA512

497435d2e16f9dad2dc2e78898ffdb04d62e68d2ce5dfb9b3ac4906811652ece049d8065206dc748aa073994a10f30b64456fb643e5674218578c733230e6baf
SSDEEP

3072:lRMiMDcyj5IFVwAZlwys9ldN/i4+0ZhuW+mP34s5SGr+culS9F9xrj69:lRMiE79KwAZlVs9/smu2AVuKS9FH6

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1064 set thread context of 976	1064	d6a8f5ed5f6f7c43f78f96ae4545bbb960de3ba39822af6337b6c08e1abd20f4.exe	27

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1064	d6a8f5ed5f6f7c43f78f96ae4545bbb960de3ba39822af6337b6c08e1abd20f4.exe

Suspicious use of WriteProcessMemory 12 IoCs

description	pid	Process	procid_target
PID 1064 wrote to memory of 976	1064	d6a8f5ed5f6f7c43f78f96ae4545bbb960de3ba39822af6337b6c08e1abd20f4.exe	27
PID 1064 wrote to memory of 976	1064	d6a8f5ed5f6f7c43f78f96ae4545bbb960de3ba39822af6337b6c08e1abd20f4.exe	27
PID 1064 wrote to memory of 976	1064	d6a8f5ed5f6f7c43f78f96ae4545bbb960de3ba39822af6337b6c08e1abd20f4.exe	27
PID 1064 wrote to memory of 976	1064	d6a8f5ed5f6f7c43f78f96ae4545bbb960de3ba39822af6337b6c08e1abd20f4.exe	27
PID 1064 wrote to memory of 976	1064	d6a8f5ed5f6f7c43f78f96ae4545bbb960de3ba39822af6337b6c08e1abd20f4.exe	27
PID 1064 wrote to memory of 976	1064	d6a8f5ed5f6f7c43f78f96ae4545bbb960de3ba39822af6337b6c08e1abd20f4.exe	27
PID 1064 wrote to memory of 976	1064	d6a8f5ed5f6f7c43f78f96ae4545bbb960de3ba39822af6337b6c08e1abd20f4.exe	27
PID 1064 wrote to memory of 976	1064	d6a8f5ed5f6f7c43f78f96ae4545bbb960de3ba39822af6337b6c08e1abd20f4.exe	27
PID 1064 wrote to memory of 976	1064	d6a8f5ed5f6f7c43f78f96ae4545bbb960de3ba39822af6337b6c08e1abd20f4.exe	27
PID 1064 wrote to memory of 976	1064	d6a8f5ed5f6f7c43f78f96ae4545bbb960de3ba39822af6337b6c08e1abd20f4.exe	27
PID 976 wrote to memory of 1360	976	d6a8f5ed5f6f7c43f78f96ae4545bbb960de3ba39822af6337b6c08e1abd20f4.exe	10
PID 976 wrote to memory of 1360	976	d6a8f5ed5f6f7c43f78f96ae4545bbb960de3ba39822af6337b6c08e1abd20f4.exe	10

memory/976-57-0x0000000000400000-0x0000000000418000-memory.dmp

Filesize
96KB

Download
memory/976-58-0x0000000000400000-0x0000000000418000-memory.dmp

Filesize
96KB

Download
memory/976-61-0x0000000000400000-0x0000000000418000-memory.dmp

Filesize
96KB

Download
memory/976-66-0x0000000000400000-0x0000000000418000-memory.dmp

Filesize
96KB

Download
memory/1064-56-0x0000000000400000-0x0000000000489000-memory.dmp

Filesize
548KB

Download
memory/1064-63-0x0000000000400000-0x0000000000489000-memory.dmp

Filesize
548KB

Download
memory/1360-65-0x00000000021F0000-0x00000000021FC000-memory.dmp

Filesize
48KB

Download
memory/1360-62-0x00000000021F0000-0x00000000021FC000-memory.dmp

Filesize
48KB

Download