6e4fa72cffa8c6cbfac487753758461e7c066e4390954ec1bd4fd26223111fdf

Analysis

max time kernel
44s
max time network
34s
platform
windows7_x64
resource
win7-20230621-en
resource tags

arch:x64arch:x86image:win7-20230621-enlocale:en-usos:windows7-x64system
submitted
28/06/2023, 16:49

Target

z1CurriculumVitaeIsabelGonzalez.exe
Size

685KB
MD5

5efa5a8dc95bb53a69c1e2124966eb68
SHA1

269565a62437e09263ed633ac2a11fddd37d8868
SHA256

6e4fa72cffa8c6cbfac487753758461e7c066e4390954ec1bd4fd26223111fdf
SHA512

6f4bbb5a8946761ed8969bcda36e654ee15bc165d83ffaa683116f9e1fe28fcd40851c43471036ed3a7e44618da5eda0b68a83c31aefdc67e6d6ba384217523b
SSDEEP

12288:lmRMesDfGR0XkRDAxuYUd5sGdiY7mNwr03BV2fr7Ff9rM:Nes7XkRD4uld5stGr030B9Y

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 864 set thread context of 980	864	z1CurriculumVitaeIsabelGonzalez.exe	28

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
980	z1CurriculumVitaeIsabelGonzalez.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 864 wrote to memory of 980	864	z1CurriculumVitaeIsabelGonzalez.exe	28
PID 864 wrote to memory of 980	864	z1CurriculumVitaeIsabelGonzalez.exe	28
PID 864 wrote to memory of 980	864	z1CurriculumVitaeIsabelGonzalez.exe	28
PID 864 wrote to memory of 980	864	z1CurriculumVitaeIsabelGonzalez.exe	28
PID 864 wrote to memory of 980	864	z1CurriculumVitaeIsabelGonzalez.exe	28
PID 864 wrote to memory of 980	864	z1CurriculumVitaeIsabelGonzalez.exe	28
PID 864 wrote to memory of 980	864	z1CurriculumVitaeIsabelGonzalez.exe	28

C:\Users\Admin\AppData\Local\Temp\z1CurriculumVitaeIsabelGonzalez.exe
"C:\Users\Admin\AppData\Local\Temp\z1CurriculumVitaeIsabelGonzalez.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:864
- C:\Users\Admin\AppData\Local\Temp\z1CurriculumVitaeIsabelGonzalez.exe
  "C:\Users\Admin\AppData\Local\Temp\z1CurriculumVitaeIsabelGonzalez.exe"
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:980

memory/864-54-0x0000000000B00000-0x0000000000BB2000-memory.dmp

Filesize
712KB

Download
memory/864-55-0x0000000004D70000-0x0000000004DB0000-memory.dmp

Filesize
256KB

Download
memory/864-56-0x00000000005E0000-0x00000000005EC000-memory.dmp

Filesize
48KB

Download
memory/864-57-0x0000000004D70000-0x0000000004DB0000-memory.dmp

Filesize
256KB

Download
memory/864-58-0x0000000000610000-0x000000000061C000-memory.dmp

Filesize
48KB

Download
memory/864-59-0x0000000005390000-0x0000000005400000-memory.dmp

Filesize
448KB

Download
memory/980-60-0x0000000000400000-0x0000000000430000-memory.dmp

Filesize
192KB

Download
memory/980-61-0x0000000000400000-0x0000000000430000-memory.dmp

Filesize
192KB

Download
memory/980-62-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/980-63-0x0000000000400000-0x0000000000430000-memory.dmp

Filesize
192KB

Download
memory/980-64-0x0000000000BC0000-0x0000000000EC3000-memory.dmp

Filesize
3.0MB

Download
memory/980-65-0x0000000000400000-0x0000000000430000-memory.dmp

Filesize
192KB

Download