7f853598248a57ecf304e54559a24eb7b1a9f073069a47e4183f8509afef098d

Analysis

max time kernel
117s
max time network
122s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
20-07-2023 19:27

Target

gfgdfgdggdgfgdfgd.exe
Size

430KB
MD5

a48fa285a9ee385a050f1f097f18a527
SHA1

22040d95ecc49dc2e7c72d40b55630b15e8501f2
SHA256

7f853598248a57ecf304e54559a24eb7b1a9f073069a47e4183f8509afef098d
SHA512

7386b6f25eff76907d7aa2bee0f7046980bbc6e1a90c9220de203423c856db674c30e85f7f05909bf1e63ce8aa5e8b7101abcb50fc94ba37e1c895aeb5381766
SSDEEP

6144:wvyLRt8hVv5mKnGu7HdiLH2usbbm1/zMscCQe5IWzp+vepIyl/j6MammD:PttuRUKnGu794HhsuRzMq5SyQM+D

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2236 set thread context of 1972	2236	gfgdfgdggdgfgdfgd.exe	29

Suspicious use of WriteProcessMemory 9 IoCs

description	pid	Process	procid_target
PID 2236 wrote to memory of 1972	2236	gfgdfgdggdgfgdfgd.exe	29
PID 2236 wrote to memory of 1972	2236	gfgdfgdggdgfgdfgd.exe	29
PID 2236 wrote to memory of 1972	2236	gfgdfgdggdgfgdfgd.exe	29
PID 2236 wrote to memory of 1972	2236	gfgdfgdggdgfgdfgd.exe	29
PID 2236 wrote to memory of 1972	2236	gfgdfgdggdgfgdfgd.exe	29
PID 2236 wrote to memory of 1972	2236	gfgdfgdggdgfgdfgd.exe	29
PID 2236 wrote to memory of 1972	2236	gfgdfgdggdgfgdfgd.exe	29
PID 2236 wrote to memory of 1972	2236	gfgdfgdggdgfgdfgd.exe	29
PID 2236 wrote to memory of 1972	2236	gfgdfgdggdgfgdfgd.exe	29

C:\Users\Admin\AppData\Local\Temp\gfgdfgdggdgfgdfgd.exe
"C:\Users\Admin\AppData\Local\Temp\gfgdfgdggdgfgdfgd.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:2236
- C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe
  "C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe"
  2⤵
  PID:1972

memory/1972-56-0x0000000000400000-0x0000000000442000-memory.dmp

Filesize
264KB

Download
memory/1972-58-0x0000000000400000-0x0000000000442000-memory.dmp

Filesize
264KB

Download
memory/1972-64-0x00000000FFFDE000-0x00000000FFFDF000-memory.dmp

Filesize
4KB

Download
memory/1972-66-0x0000000000400000-0x0000000000442000-memory.dmp

Filesize
264KB

Download
memory/1972-67-0x0000000000400000-0x0000000000442000-memory.dmp

Filesize
264KB

Download
memory/2236-55-0x0000000000090000-0x0000000000190000-memory.dmp

Filesize
1024KB

Download