62d4746fe8cb8c1fbcc99e50e969a066ad33cd2901c8a870c4607996b28f26f8

Analysis

max time kernel
117s
max time network
120s
platform
windows7_x64
resource
win7-20231023-en
resource tags

arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
submitted
23-10-2023 17:14

Target

NEAS.62d4746fe8cb8c1fbcc99e50e969a066ad33cd2901c8a870c4607996b28f26f8exe_JC.exe
Size

622KB
MD5

ec72a2d17e5aca17cd44370814199aad
SHA1

896b8008166604a48c57bdaa6adfeea9afdd8197
SHA256

62d4746fe8cb8c1fbcc99e50e969a066ad33cd2901c8a870c4607996b28f26f8
SHA512

a58e3f70085d710c7bcb1229b59b43bfc9783b3f402bd44af2b3d040cd9bdecb45f76dadb72e45fb4bbe058bf864f57ba97881419e72e7c7b570d87e586be782
SSDEEP

12288:uH/j+BAr5q/ZmKLFDcF4dNCF7YPRbrs//R0hdzB6Y72k9x11l9mteEw1dpe53W:YLgw2BLFDcGd2Ylw//udcw2kVRm8E

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2140 set thread context of 2968	2140	NEAS.62d4746fe8cb8c1fbcc99e50e969a066ad33cd2901c8a870c4607996b28f26f8exe_JC.exe	30

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
2968	NEAS.62d4746fe8cb8c1fbcc99e50e969a066ad33cd2901c8a870c4607996b28f26f8exe_JC.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2140 wrote to memory of 2968	2140	NEAS.62d4746fe8cb8c1fbcc99e50e969a066ad33cd2901c8a870c4607996b28f26f8exe_JC.exe	30
PID 2140 wrote to memory of 2968	2140	NEAS.62d4746fe8cb8c1fbcc99e50e969a066ad33cd2901c8a870c4607996b28f26f8exe_JC.exe	30
PID 2140 wrote to memory of 2968	2140	NEAS.62d4746fe8cb8c1fbcc99e50e969a066ad33cd2901c8a870c4607996b28f26f8exe_JC.exe	30
PID 2140 wrote to memory of 2968	2140	NEAS.62d4746fe8cb8c1fbcc99e50e969a066ad33cd2901c8a870c4607996b28f26f8exe_JC.exe	30
PID 2140 wrote to memory of 2968	2140	NEAS.62d4746fe8cb8c1fbcc99e50e969a066ad33cd2901c8a870c4607996b28f26f8exe_JC.exe	30
PID 2140 wrote to memory of 2968	2140	NEAS.62d4746fe8cb8c1fbcc99e50e969a066ad33cd2901c8a870c4607996b28f26f8exe_JC.exe	30
PID 2140 wrote to memory of 2968	2140	NEAS.62d4746fe8cb8c1fbcc99e50e969a066ad33cd2901c8a870c4607996b28f26f8exe_JC.exe	30

C:\Users\Admin\AppData\Local\Temp\NEAS.62d4746fe8cb8c1fbcc99e50e969a066ad33cd2901c8a870c4607996b28f26f8exe_JC.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.62d4746fe8cb8c1fbcc99e50e969a066ad33cd2901c8a870c4607996b28f26f8exe_JC.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:2140
- C:\Users\Admin\AppData\Local\Temp\NEAS.62d4746fe8cb8c1fbcc99e50e969a066ad33cd2901c8a870c4607996b28f26f8exe_JC.exe
  "C:\Users\Admin\AppData\Local\Temp\NEAS.62d4746fe8cb8c1fbcc99e50e969a066ad33cd2901c8a870c4607996b28f26f8exe_JC.exe"
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2968

memory/2140-15-0x0000000074D30000-0x000000007541E000-memory.dmp

Filesize
6.9MB

Download
memory/2140-0-0x0000000000F70000-0x0000000001012000-memory.dmp

Filesize
648KB

Download
memory/2140-2-0x0000000004E60000-0x0000000004EA0000-memory.dmp

Filesize
256KB

Download
memory/2140-3-0x0000000000860000-0x0000000000878000-memory.dmp

Filesize
96KB

Download
memory/2140-7-0x0000000005800000-0x000000000587A000-memory.dmp

Filesize
488KB

Download
memory/2140-5-0x0000000004E60000-0x0000000004EA0000-memory.dmp

Filesize
256KB

Download
memory/2140-1-0x0000000074D30000-0x000000007541E000-memory.dmp

Filesize
6.9MB

Download
memory/2140-6-0x0000000000510000-0x0000000000520000-memory.dmp

Filesize
64KB

Download
memory/2140-4-0x0000000074D30000-0x000000007541E000-memory.dmp

Filesize
6.9MB

Download
memory/2968-8-0x0000000000400000-0x000000000043A000-memory.dmp

Filesize
232KB

Download
memory/2968-12-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2968-14-0x0000000000400000-0x000000000043A000-memory.dmp

Filesize
232KB

Download
memory/2968-10-0x0000000000400000-0x000000000043A000-memory.dmp

Filesize
232KB

Download
memory/2968-17-0x0000000000400000-0x000000000043A000-memory.dmp

Filesize
232KB

Download
memory/2968-16-0x00000000008B0000-0x0000000000BB3000-memory.dmp

Filesize
3.0MB

Download
memory/2968-18-0x00000000008B0000-0x0000000000BB3000-memory.dmp

Filesize
3.0MB

Download