abacc262b5c503fd2068ed22b98c5d03cf6c7c54e5b8e91f5ced50001b7c6743

Analysis

max time kernel
109s
max time network
119s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
06/12/2022, 10:12

Target

abacc262b5c503fd2068ed22b98c5d03cf6c7c54e5b8e91f5ced50001b7c6743.exe
Size

112KB
MD5

33350069ed6d30436ab793b1c33e94b8
SHA1

89e687481cfcbe8c5b706dd5b905a83a8f645797
SHA256

abacc262b5c503fd2068ed22b98c5d03cf6c7c54e5b8e91f5ced50001b7c6743
SHA512

781b6b68641fc491abc7e62b1dca64ed92d0aca4271089b40a84aa02a1c473cbffddb1133beb87bcc65212e955a4b81e2e5524ec5764dc299eb7c0ee32d3f27e
SSDEEP

3072:r6fMRTUkP5RCcjhmaij6FaCGvyRYBb3pSQBXjTF:aMRTZmk1TTGvzJ3pSQB9

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1080 set thread context of 2052	1080	abacc262b5c503fd2068ed22b98c5d03cf6c7c54e5b8e91f5ced50001b7c6743.exe	79

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
2052	abacc262b5c503fd2068ed22b98c5d03cf6c7c54e5b8e91f5ced50001b7c6743.exe
2052	abacc262b5c503fd2068ed22b98c5d03cf6c7c54e5b8e91f5ced50001b7c6743.exe
2052	abacc262b5c503fd2068ed22b98c5d03cf6c7c54e5b8e91f5ced50001b7c6743.exe
2052	abacc262b5c503fd2068ed22b98c5d03cf6c7c54e5b8e91f5ced50001b7c6743.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1080	abacc262b5c503fd2068ed22b98c5d03cf6c7c54e5b8e91f5ced50001b7c6743.exe

Suspicious use of WriteProcessMemory 13 IoCs

description	pid	Process	procid_target
PID 1080 wrote to memory of 2052	1080	abacc262b5c503fd2068ed22b98c5d03cf6c7c54e5b8e91f5ced50001b7c6743.exe	79
PID 1080 wrote to memory of 2052	1080	abacc262b5c503fd2068ed22b98c5d03cf6c7c54e5b8e91f5ced50001b7c6743.exe	79
PID 1080 wrote to memory of 2052	1080	abacc262b5c503fd2068ed22b98c5d03cf6c7c54e5b8e91f5ced50001b7c6743.exe	79
PID 1080 wrote to memory of 2052	1080	abacc262b5c503fd2068ed22b98c5d03cf6c7c54e5b8e91f5ced50001b7c6743.exe	79
PID 1080 wrote to memory of 2052	1080	abacc262b5c503fd2068ed22b98c5d03cf6c7c54e5b8e91f5ced50001b7c6743.exe	79
PID 1080 wrote to memory of 2052	1080	abacc262b5c503fd2068ed22b98c5d03cf6c7c54e5b8e91f5ced50001b7c6743.exe	79
PID 1080 wrote to memory of 2052	1080	abacc262b5c503fd2068ed22b98c5d03cf6c7c54e5b8e91f5ced50001b7c6743.exe	79
PID 2052 wrote to memory of 2824	2052	abacc262b5c503fd2068ed22b98c5d03cf6c7c54e5b8e91f5ced50001b7c6743.exe	36
PID 2052 wrote to memory of 2824	2052	abacc262b5c503fd2068ed22b98c5d03cf6c7c54e5b8e91f5ced50001b7c6743.exe	36
PID 2052 wrote to memory of 2824	2052	abacc262b5c503fd2068ed22b98c5d03cf6c7c54e5b8e91f5ced50001b7c6743.exe	36
PID 2052 wrote to memory of 2824	2052	abacc262b5c503fd2068ed22b98c5d03cf6c7c54e5b8e91f5ced50001b7c6743.exe	36
PID 2052 wrote to memory of 2824	2052	abacc262b5c503fd2068ed22b98c5d03cf6c7c54e5b8e91f5ced50001b7c6743.exe	36
PID 2052 wrote to memory of 2824	2052	abacc262b5c503fd2068ed22b98c5d03cf6c7c54e5b8e91f5ced50001b7c6743.exe	36

memory/2052-135-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2052-137-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2052-138-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download
memory/2052-140-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download
memory/2824-139-0x000000007FFC0000-0x000000007FFC6000-memory.dmp

Filesize
24KB

Download