1679aa270a65af24f16518d92f6ef1e13a3f4f146ca05f8b957bc6dcb02c42c6

Analysis

max time kernel
118s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
12-10-2023 17:09

Target

NEAS.890693ebb7ec7a2a91b04cdeef3d3850_JC.exe
Size

39KB
MD5

890693ebb7ec7a2a91b04cdeef3d3850
SHA1

5600be89bc18051e8d2b8106e47b5ce3381b343d
SHA256

1679aa270a65af24f16518d92f6ef1e13a3f4f146ca05f8b957bc6dcb02c42c6
SHA512

073f588b6f34c079e64d1580128fcfa4981e774c885faa8457fc644c8d7cdc3e612730c10cfa3f9d862406769bc7c73b48231098f29b2b0b71ff9bde5d6575fa
SSDEEP

768:wlWveMoC6HuqYC87/zzkjlNyiivHHnRikOtYa3+V7AsCKU:wldC8uS87kjlEFHHRktz3+VHU

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2640 set thread context of 3056	2640	NEAS.890693ebb7ec7a2a91b04cdeef3d3850_JC.exe	82

Suspicious behavior: EnumeratesProcesses 4 IoCs

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 2640 wrote to memory of 3056	2640	NEAS.890693ebb7ec7a2a91b04cdeef3d3850_JC.exe	82
PID 2640 wrote to memory of 3056	2640	NEAS.890693ebb7ec7a2a91b04cdeef3d3850_JC.exe	82
PID 2640 wrote to memory of 3056	2640	NEAS.890693ebb7ec7a2a91b04cdeef3d3850_JC.exe	82
PID 2640 wrote to memory of 3056	2640	NEAS.890693ebb7ec7a2a91b04cdeef3d3850_JC.exe	82
PID 2640 wrote to memory of 3056	2640	NEAS.890693ebb7ec7a2a91b04cdeef3d3850_JC.exe	82
PID 2640 wrote to memory of 3056	2640	NEAS.890693ebb7ec7a2a91b04cdeef3d3850_JC.exe	82
PID 3056 wrote to memory of 3188	3056	NEAS.890693ebb7ec7a2a91b04cdeef3d3850_JC.exe	58
PID 3056 wrote to memory of 3188	3056	NEAS.890693ebb7ec7a2a91b04cdeef3d3850_JC.exe	58
PID 3056 wrote to memory of 3188	3056	NEAS.890693ebb7ec7a2a91b04cdeef3d3850_JC.exe	58
PID 3056 wrote to memory of 3188	3056	NEAS.890693ebb7ec7a2a91b04cdeef3d3850_JC.exe	58

memory/3056-0-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3056-2-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3056-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3056-4-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/3056-9-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3056-11-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/3188-5-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/3188-6-0x000000007FFD0000-0x000000007FFD1000-memory.dmp

Filesize
4KB

Download