a7dc9531b508495697ba8da4319664d18ebebfe5ae99ca3ec79940104b9a2aaa

Analysis

max time kernel
143s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
06-12-2022 14:52

Target

a7dc9531b508495697ba8da4319664d18ebebfe5ae99ca3ec79940104b9a2aaa.exe
Size

222KB
MD5

d14c0ef9393d59485aef083a546e588e
SHA1

78e52a7bb29709e7cc8de6f24d81b747798c42b7
SHA256

a7dc9531b508495697ba8da4319664d18ebebfe5ae99ca3ec79940104b9a2aaa
SHA512

93b7b6c9af04f95ee8278b505d89125ef27b859c369902789fed1a2a2a810ccf5bab79e02e601efe7c870f40ad26828cbbcdebfb1c060d4ee33c560728b82dce
SSDEEP

3072:yHUt9IeAwf0RMEIVTpfEIEdaVo8TcWky4w6Y6J69fa8ew5vG8cXJ4OSqAy2IYjYK:yAtfqixJaQtV1bozSAInq/bLGV

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 5028 set thread context of 3808	5028	a7dc9531b508495697ba8da4319664d18ebebfe5ae99ca3ec79940104b9a2aaa.exe	81

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3808	a7dc9531b508495697ba8da4319664d18ebebfe5ae99ca3ec79940104b9a2aaa.exe
3808	a7dc9531b508495697ba8da4319664d18ebebfe5ae99ca3ec79940104b9a2aaa.exe
3808	a7dc9531b508495697ba8da4319664d18ebebfe5ae99ca3ec79940104b9a2aaa.exe
3808	a7dc9531b508495697ba8da4319664d18ebebfe5ae99ca3ec79940104b9a2aaa.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
5028	a7dc9531b508495697ba8da4319664d18ebebfe5ae99ca3ec79940104b9a2aaa.exe
5028	a7dc9531b508495697ba8da4319664d18ebebfe5ae99ca3ec79940104b9a2aaa.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 5028 wrote to memory of 3808	5028	a7dc9531b508495697ba8da4319664d18ebebfe5ae99ca3ec79940104b9a2aaa.exe	81
PID 5028 wrote to memory of 3808	5028	a7dc9531b508495697ba8da4319664d18ebebfe5ae99ca3ec79940104b9a2aaa.exe	81
PID 5028 wrote to memory of 3808	5028	a7dc9531b508495697ba8da4319664d18ebebfe5ae99ca3ec79940104b9a2aaa.exe	81
PID 5028 wrote to memory of 3808	5028	a7dc9531b508495697ba8da4319664d18ebebfe5ae99ca3ec79940104b9a2aaa.exe	81
PID 5028 wrote to memory of 3808	5028	a7dc9531b508495697ba8da4319664d18ebebfe5ae99ca3ec79940104b9a2aaa.exe	81
PID 5028 wrote to memory of 3808	5028	a7dc9531b508495697ba8da4319664d18ebebfe5ae99ca3ec79940104b9a2aaa.exe	81
PID 5028 wrote to memory of 3808	5028	a7dc9531b508495697ba8da4319664d18ebebfe5ae99ca3ec79940104b9a2aaa.exe	81
PID 3808 wrote to memory of 1040	3808	a7dc9531b508495697ba8da4319664d18ebebfe5ae99ca3ec79940104b9a2aaa.exe	48
PID 3808 wrote to memory of 1040	3808	a7dc9531b508495697ba8da4319664d18ebebfe5ae99ca3ec79940104b9a2aaa.exe	48
PID 3808 wrote to memory of 1040	3808	a7dc9531b508495697ba8da4319664d18ebebfe5ae99ca3ec79940104b9a2aaa.exe	48
PID 3808 wrote to memory of 1040	3808	a7dc9531b508495697ba8da4319664d18ebebfe5ae99ca3ec79940104b9a2aaa.exe	48

memory/1040-141-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/3808-136-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3808-139-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3808-140-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/3808-142-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3808-143-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/5028-132-0x0000000000400000-0x000000000042C000-memory.dmp

Filesize
176KB

Download
memory/5028-138-0x0000000000400000-0x000000000042C000-memory.dmp

Filesize
176KB

Download