9537293cfef55e27b9a623a5af740d75e3b2122830b59dbaaaa87fac84a60d99

Analysis

max time kernel
170s
max time network
184s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
06/12/2022, 10:48

Target

9537293cfef55e27b9a623a5af740d75e3b2122830b59dbaaaa87fac84a60d99.exe
Size

191KB
MD5

b8fe1b64680044a514c7f8fbf5f6ebbb
SHA1

eb9869826df7d705f890c6923d218cd0e20091ca
SHA256

9537293cfef55e27b9a623a5af740d75e3b2122830b59dbaaaa87fac84a60d99
SHA512

6e4b04d0c300a07e358bafacb861b0c63b29dec49fff640394365ea48968f9a9283627da282556ff929c84c740c0d82a3cc19ade279cca4c7adb63e170b04e01
SSDEEP

3072:kNQHE0n67JRU5mUyp3nbspTuACE+WEI/CBvWazl+n++HQeXFrUWBSyxjtAqkB:G0nemY3n2hdCBOaREHh1rUWBXxjtAFB

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 3088 set thread context of 3832	3088	9537293cfef55e27b9a623a5af740d75e3b2122830b59dbaaaa87fac84a60d99.exe	80

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3832	9537293cfef55e27b9a623a5af740d75e3b2122830b59dbaaaa87fac84a60d99.exe
3832	9537293cfef55e27b9a623a5af740d75e3b2122830b59dbaaaa87fac84a60d99.exe
3832	9537293cfef55e27b9a623a5af740d75e3b2122830b59dbaaaa87fac84a60d99.exe
3832	9537293cfef55e27b9a623a5af740d75e3b2122830b59dbaaaa87fac84a60d99.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3088	9537293cfef55e27b9a623a5af740d75e3b2122830b59dbaaaa87fac84a60d99.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 3088 wrote to memory of 3832	3088	9537293cfef55e27b9a623a5af740d75e3b2122830b59dbaaaa87fac84a60d99.exe	80
PID 3088 wrote to memory of 3832	3088	9537293cfef55e27b9a623a5af740d75e3b2122830b59dbaaaa87fac84a60d99.exe	80
PID 3088 wrote to memory of 3832	3088	9537293cfef55e27b9a623a5af740d75e3b2122830b59dbaaaa87fac84a60d99.exe	80
PID 3088 wrote to memory of 3832	3088	9537293cfef55e27b9a623a5af740d75e3b2122830b59dbaaaa87fac84a60d99.exe	80
PID 3088 wrote to memory of 3832	3088	9537293cfef55e27b9a623a5af740d75e3b2122830b59dbaaaa87fac84a60d99.exe	80
PID 3088 wrote to memory of 3832	3088	9537293cfef55e27b9a623a5af740d75e3b2122830b59dbaaaa87fac84a60d99.exe	80
PID 3088 wrote to memory of 3832	3088	9537293cfef55e27b9a623a5af740d75e3b2122830b59dbaaaa87fac84a60d99.exe	80
PID 3832 wrote to memory of 376	3832	9537293cfef55e27b9a623a5af740d75e3b2122830b59dbaaaa87fac84a60d99.exe	73
PID 3832 wrote to memory of 376	3832	9537293cfef55e27b9a623a5af740d75e3b2122830b59dbaaaa87fac84a60d99.exe	73
PID 3832 wrote to memory of 376	3832	9537293cfef55e27b9a623a5af740d75e3b2122830b59dbaaaa87fac84a60d99.exe	73
PID 3832 wrote to memory of 376	3832	9537293cfef55e27b9a623a5af740d75e3b2122830b59dbaaaa87fac84a60d99.exe	73

memory/376-139-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/3088-137-0x0000000000400000-0x000000000046E000-memory.dmp

Filesize
440KB

Download
memory/3832-135-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3832-138-0x0000000000400000-0x0000000000408960-memory.dmp

Filesize
34KB

Download
memory/3832-140-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download