9faa76e174866b44c256af8c9d2bc0c09f56b3a04ea1a0beda8ffdd6b551b343

Analysis

max time kernel
89s
max time network
120s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
10-07-2023 19:55

Target

â¶ï¸Sex Camers_8097.exe
Size

1.4MB
MD5

a119b9b350cdd2382ecc4914d081eda1
SHA1

ac98b5b36d997874bdfcbaa2dd90022849d5a894
SHA256

b7419ea76f2a01b4b73f92b7cc78bf1b5bcba0195ac08d610aafe87898032307
SHA512

1a7d6355f038b2d1692d64756241aa19c92b83ed0cd45f892dbd2465a8c878de8af6b7748d661151305876f775aab9031065a95cf99e3c420c62da3d8cce3242
SSDEEP

6144:C9t/c6VE7ZNAWlhVeOsi/yAOeAsGSmhl8f:mBc6VE7ZGCdyAwhlq

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 4388 set thread context of 2748	4388	â¶ï¸Sex Camers_8097.exe	87

Suspicious use of WriteProcessMemory 9 IoCs

description	pid	Process	procid_target
PID 4388 wrote to memory of 2748	4388	â¶ï¸Sex Camers_8097.exe	87
PID 4388 wrote to memory of 2748	4388	â¶ï¸Sex Camers_8097.exe	87
PID 4388 wrote to memory of 2748	4388	â¶ï¸Sex Camers_8097.exe	87
PID 4388 wrote to memory of 2748	4388	â¶ï¸Sex Camers_8097.exe	87
PID 4388 wrote to memory of 2748	4388	â¶ï¸Sex Camers_8097.exe	87
PID 4388 wrote to memory of 2748	4388	â¶ï¸Sex Camers_8097.exe	87
PID 4388 wrote to memory of 2748	4388	â¶ï¸Sex Camers_8097.exe	87
PID 4388 wrote to memory of 2748	4388	â¶ï¸Sex Camers_8097.exe	87
PID 4388 wrote to memory of 2748	4388	â¶ï¸Sex Camers_8097.exe	87

C:\Users\Admin\AppData\Local\Temp\â¶ï¸Sex Camers_8097.exe
"C:\Users\Admin\AppData\Local\Temp\â¶ï¸Sex Camers_8097.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:4388
- C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe
  "C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe"
  2⤵
  PID:2748

memory/2748-133-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2748-135-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2748-136-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2748-137-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2748-139-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2748-141-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2748-142-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2748-144-0x0000000002AF0000-0x0000000002AF1000-memory.dmp

Filesize
4KB

Download
memory/2748-145-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2748-146-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download