357a59b15435271b1d72fba85716efe53460c2a013aaeffff62ad50bf1f5ddb1

Analysis

max time kernel
17s
max time network
33s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
05/12/2022, 15:09

Target

357a59b15435271b1d72fba85716efe53460c2a013aaeffff62ad50bf1f5ddb1.exe
Size

64KB
MD5

b744c9656c7792af5c3045c6d2c0028e
SHA1

c862573083e93daf0b48aa3e51e3bad02814ae8a
SHA256

357a59b15435271b1d72fba85716efe53460c2a013aaeffff62ad50bf1f5ddb1
SHA512

06afb5bf05f7a5835636b8d0c086db60233485d5059c9ed15b85ab42266c81d05260b83b8300786e42da9ae115211c97cc967ccc997bcb95a2ddc99d093ab580
SSDEEP

1536:Cp2bEyHcrfWkxUKn1a7sPmHL4G2I7Th6XHgs2MoWdE:CEbkrvUKn1ager4GJTQF2M/dE

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2036 set thread context of 2032	2036	357a59b15435271b1d72fba85716efe53460c2a013aaeffff62ad50bf1f5ddb1.exe	28

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2032	357a59b15435271b1d72fba85716efe53460c2a013aaeffff62ad50bf1f5ddb1.exe
2032	357a59b15435271b1d72fba85716efe53460c2a013aaeffff62ad50bf1f5ddb1.exe

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 2036 wrote to memory of 2032	2036	357a59b15435271b1d72fba85716efe53460c2a013aaeffff62ad50bf1f5ddb1.exe	28
PID 2036 wrote to memory of 2032	2036	357a59b15435271b1d72fba85716efe53460c2a013aaeffff62ad50bf1f5ddb1.exe	28
PID 2036 wrote to memory of 2032	2036	357a59b15435271b1d72fba85716efe53460c2a013aaeffff62ad50bf1f5ddb1.exe	28
PID 2036 wrote to memory of 2032	2036	357a59b15435271b1d72fba85716efe53460c2a013aaeffff62ad50bf1f5ddb1.exe	28
PID 2036 wrote to memory of 2032	2036	357a59b15435271b1d72fba85716efe53460c2a013aaeffff62ad50bf1f5ddb1.exe	28
PID 2036 wrote to memory of 2032	2036	357a59b15435271b1d72fba85716efe53460c2a013aaeffff62ad50bf1f5ddb1.exe	28
PID 2032 wrote to memory of 1228	2032	357a59b15435271b1d72fba85716efe53460c2a013aaeffff62ad50bf1f5ddb1.exe	17
PID 2032 wrote to memory of 1228	2032	357a59b15435271b1d72fba85716efe53460c2a013aaeffff62ad50bf1f5ddb1.exe	17
PID 2032 wrote to memory of 1228	2032	357a59b15435271b1d72fba85716efe53460c2a013aaeffff62ad50bf1f5ddb1.exe	17
PID 2032 wrote to memory of 1228	2032	357a59b15435271b1d72fba85716efe53460c2a013aaeffff62ad50bf1f5ddb1.exe	17

memory/1228-62-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/2032-54-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2032-55-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2032-57-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2032-60-0x0000000000400000-0x00000000004083A0-memory.dmp

Filesize
32KB

Download
memory/2032-61-0x0000000076381000-0x0000000076383000-memory.dmp

Filesize
8KB

Download
memory/2032-65-0x0000000010000000-0x0000000010012000-memory.dmp

Filesize
72KB

Download