e88f353f80921e0c08a07ff6b21a2b49e76f725b64091882f195ad2188bfed7d

Analysis

max time kernel
117s
max time network
120s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
19/09/2023, 06:51

Target

k6410515.exe
Size

371KB
MD5

6804acbd44a5ab4c608fdb92341183ee
SHA1

acb81d6f72ec55d985ab931d377b512c51f04f60
SHA256

e88f353f80921e0c08a07ff6b21a2b49e76f725b64091882f195ad2188bfed7d
SHA512

7613220aae6ee741c3db4b576bf9b5c25b47ca45d96096161b72b99e02535d4c4d94e2fab6c9e2e37555d771338536a89862e5ec527cac4e61ab314378184123
SSDEEP

6144:PYvJm09zORs+z/TMify9DAOxgQPqrgJA0Tdm2SSTkZ7vMQiEg8/:Pow09CK5NclUJA05m7KAvMlt8/

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1664 set thread context of 3012	1664	k6410515.exe	28

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2268	3012	WerFault.exe	28

Suspicious use of WriteProcessMemory 21 IoCs

description	pid	Process	procid_target
PID 1664 wrote to memory of 3012	1664	k6410515.exe	28
PID 1664 wrote to memory of 3012	1664	k6410515.exe	28
PID 1664 wrote to memory of 3012	1664	k6410515.exe	28
PID 1664 wrote to memory of 3012	1664	k6410515.exe	28
PID 1664 wrote to memory of 3012	1664	k6410515.exe	28
PID 1664 wrote to memory of 3012	1664	k6410515.exe	28
PID 1664 wrote to memory of 3012	1664	k6410515.exe	28
PID 1664 wrote to memory of 3012	1664	k6410515.exe	28
PID 1664 wrote to memory of 3012	1664	k6410515.exe	28
PID 1664 wrote to memory of 3012	1664	k6410515.exe	28
PID 1664 wrote to memory of 3012	1664	k6410515.exe	28
PID 1664 wrote to memory of 3012	1664	k6410515.exe	28
PID 1664 wrote to memory of 3012	1664	k6410515.exe	28
PID 1664 wrote to memory of 3012	1664	k6410515.exe	28
PID 3012 wrote to memory of 2268	3012	AppLaunch.exe	29
PID 3012 wrote to memory of 2268	3012	AppLaunch.exe	29
PID 3012 wrote to memory of 2268	3012	AppLaunch.exe	29
PID 3012 wrote to memory of 2268	3012	AppLaunch.exe	29
PID 3012 wrote to memory of 2268	3012	AppLaunch.exe	29
PID 3012 wrote to memory of 2268	3012	AppLaunch.exe	29
PID 3012 wrote to memory of 2268	3012	AppLaunch.exe	29

memory/3012-0-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/3012-1-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/3012-2-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/3012-3-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/3012-4-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/3012-5-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/3012-6-0x00000000FFFDE000-0x00000000FFFDF000-memory.dmp

Filesize
4KB

Download
memory/3012-7-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/3012-9-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/3012-11-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download