c0545f16fbbecef4ff1983c05e620651f24c48d3debaf525fd3e057ef688fae4

Resubmissions

30/08/2023, 23:51

29/08/2023, 18:38

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
30/08/2023, 23:51

Target

c0545f16fbbecef4ff1983c05e620651f24c48d3debaf525fd3e057ef688fae4.exe
Size

664KB
MD5

04bcbc084757b3dc87cdc158372207d8
SHA1

0eae3faac86b067e268f95313bd9c651a2187c64
SHA256

c0545f16fbbecef4ff1983c05e620651f24c48d3debaf525fd3e057ef688fae4
SHA512

e6de6a50253d986c4e76fb42935a2268d1a1c6811df7e66544267c24138ee43f56ce2b45c9aa0e24ec57afe5f5128cc1288a2f2d38603fa93cfd26a39ca8487d
SSDEEP

12288:uJdoCUhRcOJ5cY7Jg9oC9f0viSM/vb/F0weXFEUFFDeP69cu6lDy:uf5yP29oviSM/v7eDeF

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1368 set thread context of 2396	1368	c0545f16fbbecef4ff1983c05e620651f24c48d3debaf525fd3e057ef688fae4.exe	30

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1128	2396	WerFault.exe	30

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 1368 wrote to memory of 2396	1368	c0545f16fbbecef4ff1983c05e620651f24c48d3debaf525fd3e057ef688fae4.exe	30
PID 1368 wrote to memory of 2396	1368	c0545f16fbbecef4ff1983c05e620651f24c48d3debaf525fd3e057ef688fae4.exe	30
PID 1368 wrote to memory of 2396	1368	c0545f16fbbecef4ff1983c05e620651f24c48d3debaf525fd3e057ef688fae4.exe	30
PID 1368 wrote to memory of 2396	1368	c0545f16fbbecef4ff1983c05e620651f24c48d3debaf525fd3e057ef688fae4.exe	30
PID 1368 wrote to memory of 2396	1368	c0545f16fbbecef4ff1983c05e620651f24c48d3debaf525fd3e057ef688fae4.exe	30
PID 1368 wrote to memory of 2396	1368	c0545f16fbbecef4ff1983c05e620651f24c48d3debaf525fd3e057ef688fae4.exe	30
PID 1368 wrote to memory of 2396	1368	c0545f16fbbecef4ff1983c05e620651f24c48d3debaf525fd3e057ef688fae4.exe	30
PID 2396 wrote to memory of 1128	2396	c0545f16fbbecef4ff1983c05e620651f24c48d3debaf525fd3e057ef688fae4.exe	31
PID 2396 wrote to memory of 1128	2396	c0545f16fbbecef4ff1983c05e620651f24c48d3debaf525fd3e057ef688fae4.exe	31
PID 2396 wrote to memory of 1128	2396	c0545f16fbbecef4ff1983c05e620651f24c48d3debaf525fd3e057ef688fae4.exe	31
PID 2396 wrote to memory of 1128	2396	c0545f16fbbecef4ff1983c05e620651f24c48d3debaf525fd3e057ef688fae4.exe	31

memory/1368-6-0x00000000003C0000-0x00000000003CC000-memory.dmp

Filesize
48KB

Download
memory/1368-7-0x00000000003D0000-0x00000000003DE000-memory.dmp

Filesize
56KB

Download
memory/1368-2-0x0000000004C90000-0x0000000004CD0000-memory.dmp

Filesize
256KB

Download
memory/1368-3-0x0000000000390000-0x00000000003A6000-memory.dmp

Filesize
88KB

Download
memory/1368-4-0x00000000741F0000-0x00000000748DE000-memory.dmp

Filesize
6.9MB

Download
memory/1368-5-0x0000000004C90000-0x0000000004CD0000-memory.dmp

Filesize
256KB

Download
memory/1368-8-0x0000000004C20000-0x0000000004C96000-memory.dmp

Filesize
472KB

Download
memory/1368-0-0x0000000000F70000-0x000000000101A000-memory.dmp

Filesize
680KB

Download
memory/1368-1-0x00000000741F0000-0x00000000748DE000-memory.dmp

Filesize
6.9MB

Download
memory/1368-15-0x00000000741F0000-0x00000000748DE000-memory.dmp

Filesize
6.9MB

Download
memory/2396-14-0x0000000000400000-0x0000000000435000-memory.dmp

Filesize
212KB

Download
memory/2396-12-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2396-11-0x0000000000400000-0x0000000000435000-memory.dmp

Filesize
212KB

Download
memory/2396-9-0x0000000000400000-0x0000000000435000-memory.dmp

Filesize
212KB

Download