6e4fa72cffa8c6cbfac487753758461e7c066e4390954ec1bd4fd26223111fdf

Analysis

max time kernel
77s
max time network
90s
platform
windows10-2004_x64
resource
win10v2004-20230621-en
resource tags

arch:x64arch:x86image:win10v2004-20230621-enlocale:en-usos:windows10-2004-x64system
submitted
28/06/2023, 16:49

Target

z1CurriculumVitaeIsabelGonzalez.exe
Size

685KB
MD5

5efa5a8dc95bb53a69c1e2124966eb68
SHA1

269565a62437e09263ed633ac2a11fddd37d8868
SHA256

6e4fa72cffa8c6cbfac487753758461e7c066e4390954ec1bd4fd26223111fdf
SHA512

6f4bbb5a8946761ed8969bcda36e654ee15bc165d83ffaa683116f9e1fe28fcd40851c43471036ed3a7e44618da5eda0b68a83c31aefdc67e6d6ba384217523b
SSDEEP

12288:lmRMesDfGR0XkRDAxuYUd5sGdiY7mNwr03BV2fr7Ff9rM:Nes7XkRD4uld5stGr030B9Y

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 3104 set thread context of 5044	3104	z1CurriculumVitaeIsabelGonzalez.exe	96

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5044	z1CurriculumVitaeIsabelGonzalez.exe
5044	z1CurriculumVitaeIsabelGonzalez.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 3104 wrote to memory of 5044	3104	z1CurriculumVitaeIsabelGonzalez.exe	96
PID 3104 wrote to memory of 5044	3104	z1CurriculumVitaeIsabelGonzalez.exe	96
PID 3104 wrote to memory of 5044	3104	z1CurriculumVitaeIsabelGonzalez.exe	96
PID 3104 wrote to memory of 5044	3104	z1CurriculumVitaeIsabelGonzalez.exe	96
PID 3104 wrote to memory of 5044	3104	z1CurriculumVitaeIsabelGonzalez.exe	96
PID 3104 wrote to memory of 5044	3104	z1CurriculumVitaeIsabelGonzalez.exe	96

C:\Users\Admin\AppData\Local\Temp\z1CurriculumVitaeIsabelGonzalez.exe
"C:\Users\Admin\AppData\Local\Temp\z1CurriculumVitaeIsabelGonzalez.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:3104
- C:\Users\Admin\AppData\Local\Temp\z1CurriculumVitaeIsabelGonzalez.exe
  "C:\Users\Admin\AppData\Local\Temp\z1CurriculumVitaeIsabelGonzalez.exe"
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5044

memory/3104-133-0x0000000000630000-0x00000000006E2000-memory.dmp

Filesize
712KB

Download
memory/3104-134-0x00000000055B0000-0x0000000005B54000-memory.dmp

Filesize
5.6MB

Download
memory/3104-135-0x00000000050A0000-0x0000000005132000-memory.dmp

Filesize
584KB

Download
memory/3104-136-0x0000000005CB0000-0x0000000005CBA000-memory.dmp

Filesize
40KB

Download
memory/3104-137-0x0000000005D70000-0x0000000005E0C000-memory.dmp

Filesize
624KB

Download
memory/3104-138-0x0000000005220000-0x0000000005230000-memory.dmp

Filesize
64KB

Download
memory/3104-139-0x0000000005220000-0x0000000005230000-memory.dmp

Filesize
64KB

Download
memory/5044-140-0x0000000000400000-0x0000000000430000-memory.dmp

Filesize
192KB

Download
memory/5044-142-0x0000000000400000-0x0000000000430000-memory.dmp

Filesize
192KB

Download
memory/5044-143-0x0000000001720000-0x0000000001A6A000-memory.dmp

Filesize
3.3MB

Download
memory/5044-144-0x0000000001720000-0x0000000001A6A000-memory.dmp

Filesize
3.3MB

Download