64f2687dfeb39a2db9d95cecb789956a8eec42efe034943f70b54488c151d028

Analysis

max time kernel
149s
max time network
182s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
07/12/2022, 02:42

Target

64f2687dfeb39a2db9d95cecb789956a8eec42efe034943f70b54488c151d028.exe
Size

574KB
MD5

66d32d9f66a2311dd381c7c3b0e5e892
SHA1

75db8c89766b5b189c6b5731a7efa9273877d9bf
SHA256

64f2687dfeb39a2db9d95cecb789956a8eec42efe034943f70b54488c151d028
SHA512

c7b8bb8c807ac514baf4591d0e031b2814a8c3a6e9e5919223b6e3bc0c5c86235328ebeb46237a306b479c0edd859fab65353efa517e19dd5688d93a1f00259a
SSDEEP

12288:O2UxfcBpz6HkZO2el8uuzQEjzM6V1D31aaw4RNZ9faGFiSIHMSK7c63+P7/ai:DqfcBpGHOU8JQEnM4FwGNZ9xiSIHMSK0

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 904 set thread context of 392	904	64f2687dfeb39a2db9d95cecb789956a8eec42efe034943f70b54488c151d028.exe	79

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
392	64f2687dfeb39a2db9d95cecb789956a8eec42efe034943f70b54488c151d028.exe
392	64f2687dfeb39a2db9d95cecb789956a8eec42efe034943f70b54488c151d028.exe
392	64f2687dfeb39a2db9d95cecb789956a8eec42efe034943f70b54488c151d028.exe
392	64f2687dfeb39a2db9d95cecb789956a8eec42efe034943f70b54488c151d028.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
904	64f2687dfeb39a2db9d95cecb789956a8eec42efe034943f70b54488c151d028.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 904 wrote to memory of 392	904	64f2687dfeb39a2db9d95cecb789956a8eec42efe034943f70b54488c151d028.exe	79
PID 904 wrote to memory of 392	904	64f2687dfeb39a2db9d95cecb789956a8eec42efe034943f70b54488c151d028.exe	79
PID 904 wrote to memory of 392	904	64f2687dfeb39a2db9d95cecb789956a8eec42efe034943f70b54488c151d028.exe	79
PID 904 wrote to memory of 392	904	64f2687dfeb39a2db9d95cecb789956a8eec42efe034943f70b54488c151d028.exe	79
PID 904 wrote to memory of 392	904	64f2687dfeb39a2db9d95cecb789956a8eec42efe034943f70b54488c151d028.exe	79
PID 904 wrote to memory of 392	904	64f2687dfeb39a2db9d95cecb789956a8eec42efe034943f70b54488c151d028.exe	79
PID 904 wrote to memory of 392	904	64f2687dfeb39a2db9d95cecb789956a8eec42efe034943f70b54488c151d028.exe	79
PID 392 wrote to memory of 1396	392	64f2687dfeb39a2db9d95cecb789956a8eec42efe034943f70b54488c151d028.exe	38
PID 392 wrote to memory of 1396	392	64f2687dfeb39a2db9d95cecb789956a8eec42efe034943f70b54488c151d028.exe	38
PID 392 wrote to memory of 1396	392	64f2687dfeb39a2db9d95cecb789956a8eec42efe034943f70b54488c151d028.exe	38
PID 392 wrote to memory of 1396	392	64f2687dfeb39a2db9d95cecb789956a8eec42efe034943f70b54488c151d028.exe	38

memory/392-140-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/392-143-0x0000000000400000-0x0000000000408960-memory.dmp

Filesize
34KB

Download
memory/392-145-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/904-133-0x0000000000400000-0x000000000050B000-memory.dmp

Filesize
1.0MB

Download
memory/904-136-0x0000000000400000-0x000000000050B000-memory.dmp

Filesize
1.0MB

Download
memory/904-137-0x00000000005E0000-0x00000000005E4000-memory.dmp

Filesize
16KB

Download
memory/904-138-0x0000000002300000-0x0000000002360000-memory.dmp

Filesize
384KB

Download
memory/904-142-0x0000000000400000-0x000000000050B000-memory.dmp

Filesize
1.0MB

Download
memory/1396-144-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download