07aca67626e28f7b7b5d2c81390a08274ef6f6b6fd028a0c872922321c5c206a

Analysis

max time kernel
134s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
23-09-2023 12:15

Target

792b1a65de9d264d30fa12e986664bd0_JC.exe
Size

70KB
MD5

792b1a65de9d264d30fa12e986664bd0
SHA1

31287ca5dd01637d23aceaea5fe36f2524f5c3af
SHA256

07aca67626e28f7b7b5d2c81390a08274ef6f6b6fd028a0c872922321c5c206a
SHA512

9c1e0f2d413f48b823f192b4f9e5083d57898d749f955e8065bf8090a78d757e8e5e91160d993bd4c7cc24fc2296934aa014b96142bf735859a7eac70871dc92
SSDEEP

1536:zyI81fWxkB+njvGgzDrDD2a3x05G/WkRMA:af3gDDaaBx6A

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 4204 set thread context of 3412	4204	792b1a65de9d264d30fa12e986664bd0_JC.exe	85

Suspicious behavior: EnumeratesProcesses 6 IoCs

Suspicious use of WriteProcessMemory 9 IoCs

description	pid	Process	procid_target
PID 4204 wrote to memory of 3412	4204	792b1a65de9d264d30fa12e986664bd0_JC.exe	85
PID 4204 wrote to memory of 3412	4204	792b1a65de9d264d30fa12e986664bd0_JC.exe	85
PID 4204 wrote to memory of 3412	4204	792b1a65de9d264d30fa12e986664bd0_JC.exe	85
PID 4204 wrote to memory of 3412	4204	792b1a65de9d264d30fa12e986664bd0_JC.exe	85
PID 4204 wrote to memory of 3412	4204	792b1a65de9d264d30fa12e986664bd0_JC.exe	85
PID 3412 wrote to memory of 3140	3412	792b1a65de9d264d30fa12e986664bd0_JC.exe	62
PID 3412 wrote to memory of 3140	3412	792b1a65de9d264d30fa12e986664bd0_JC.exe	62
PID 3412 wrote to memory of 3140	3412	792b1a65de9d264d30fa12e986664bd0_JC.exe	62
PID 3412 wrote to memory of 3140	3412	792b1a65de9d264d30fa12e986664bd0_JC.exe	62

memory/3140-6-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/3140-7-0x000000007FFD0000-0x000000007FFD1000-memory.dmp

Filesize
4KB

Download
memory/3412-0-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3412-2-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3412-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3412-5-0x0000000000020000-0x0000000000032000-memory.dmp

Filesize
72KB

Download
memory/3412-10-0x0000000000020000-0x0000000000032000-memory.dmp

Filesize
72KB

Download
memory/4204-4-0x0000000010000000-0x0000000010018000-memory.dmp

Filesize
96KB

Download