f3b3b0f241e737b5c61adeb5fd83dc0840a77eee8f5436818178b70d226034ed

Analysis

max time kernel
75s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
06/12/2022, 14:13

Target

f3b3b0f241e737b5c61adeb5fd83dc0840a77eee8f5436818178b70d226034ed.exe
Size

707KB
MD5

af4fdd8f10df20b336226cdc98856570
SHA1

c86d589eabec0e58b47439ae13c698d2a00ae915
SHA256

f3b3b0f241e737b5c61adeb5fd83dc0840a77eee8f5436818178b70d226034ed
SHA512

2ef9d236e591477d1c00eb1870714d4135c36c58cae96c88e85a5aeae1254b1c8e10d2856e1ac3960b13b8ed39de583d5e5ad027e89ea9239b30f24cafe82b2a
SSDEEP

12288:I8ao7YNQ3LPxez8dFlZqBpUzeOXC7g9QjUFfRN+5qJC/hErwqAK:V7wQEz+8DOdrJC/WGK

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 3284 set thread context of 2940	3284	f3b3b0f241e737b5c61adeb5fd83dc0840a77eee8f5436818178b70d226034ed.exe	80

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
2940	f3b3b0f241e737b5c61adeb5fd83dc0840a77eee8f5436818178b70d226034ed.exe
2940	f3b3b0f241e737b5c61adeb5fd83dc0840a77eee8f5436818178b70d226034ed.exe
2940	f3b3b0f241e737b5c61adeb5fd83dc0840a77eee8f5436818178b70d226034ed.exe
2940	f3b3b0f241e737b5c61adeb5fd83dc0840a77eee8f5436818178b70d226034ed.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3284	f3b3b0f241e737b5c61adeb5fd83dc0840a77eee8f5436818178b70d226034ed.exe
3284	f3b3b0f241e737b5c61adeb5fd83dc0840a77eee8f5436818178b70d226034ed.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 3284 wrote to memory of 2940	3284	f3b3b0f241e737b5c61adeb5fd83dc0840a77eee8f5436818178b70d226034ed.exe	80
PID 3284 wrote to memory of 2940	3284	f3b3b0f241e737b5c61adeb5fd83dc0840a77eee8f5436818178b70d226034ed.exe	80
PID 3284 wrote to memory of 2940	3284	f3b3b0f241e737b5c61adeb5fd83dc0840a77eee8f5436818178b70d226034ed.exe	80
PID 3284 wrote to memory of 2940	3284	f3b3b0f241e737b5c61adeb5fd83dc0840a77eee8f5436818178b70d226034ed.exe	80
PID 3284 wrote to memory of 2940	3284	f3b3b0f241e737b5c61adeb5fd83dc0840a77eee8f5436818178b70d226034ed.exe	80
PID 3284 wrote to memory of 2940	3284	f3b3b0f241e737b5c61adeb5fd83dc0840a77eee8f5436818178b70d226034ed.exe	80
PID 3284 wrote to memory of 2940	3284	f3b3b0f241e737b5c61adeb5fd83dc0840a77eee8f5436818178b70d226034ed.exe	80
PID 2940 wrote to memory of 776	2940	f3b3b0f241e737b5c61adeb5fd83dc0840a77eee8f5436818178b70d226034ed.exe	72
PID 2940 wrote to memory of 776	2940	f3b3b0f241e737b5c61adeb5fd83dc0840a77eee8f5436818178b70d226034ed.exe	72
PID 2940 wrote to memory of 776	2940	f3b3b0f241e737b5c61adeb5fd83dc0840a77eee8f5436818178b70d226034ed.exe	72
PID 2940 wrote to memory of 776	2940	f3b3b0f241e737b5c61adeb5fd83dc0840a77eee8f5436818178b70d226034ed.exe	72

memory/776-144-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/2940-141-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2940-143-0x0000000000400000-0x0000000000408960-memory.dmp

Filesize
34KB

Download
memory/2940-145-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/3284-133-0x0000000002560000-0x0000000002570000-memory.dmp

Filesize
64KB

Download
memory/3284-134-0x0000000002570000-0x0000000002580000-memory.dmp

Filesize
64KB

Download
memory/3284-136-0x00000000031D0000-0x00000000031E0000-memory.dmp

Filesize
64KB

Download
memory/3284-135-0x00000000031C0000-0x00000000031D0000-memory.dmp

Filesize
64KB

Download
memory/3284-137-0x00000000031E0000-0x00000000031F0000-memory.dmp

Filesize
64KB

Download
memory/3284-132-0x0000000002550000-0x0000000002560000-memory.dmp

Filesize
64KB

Download