6f955c6d0db18df11a8c1797208beb949eb30b5bd0443f7adb9731615b368aa8

Analysis

max time kernel
185s
max time network
261s
platform
windows10-1703_x64
resource
win10-20231020-en
resource tags

arch:x64arch:x86image:win10-20231020-enlocale:en-usos:windows10-1703-x64system
submitted
24/10/2023, 06:07

Target

1AE46Yf6.exe
Size

320KB
MD5

e941da6fe6a36a6e4c84d19a15d99743
SHA1

d557bd482ed220d9f1f6b06ec3791ad9d41af036
SHA256

6f955c6d0db18df11a8c1797208beb949eb30b5bd0443f7adb9731615b368aa8
SHA512

45a973c191368cc56f6ff79a235ad7103f54df6a5d32ee7d11d4e3346af1cc60996caa1c6e94a4fa21789ad9f7ee57a82dde607455ca8fb48407c60cbd023920
SSDEEP

6144:MdaK3l99cV4E4qtnx6GTDKSa+dSecKnXq6KtvrY0FeETkhxnd:TK199yNTWSeSXq6KJVSxnd

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 3128 set thread context of 428	3128	1AE46Yf6.exe	71

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 3128 wrote to memory of 428	3128	1AE46Yf6.exe	71
PID 3128 wrote to memory of 428	3128	1AE46Yf6.exe	71
PID 3128 wrote to memory of 428	3128	1AE46Yf6.exe	71
PID 3128 wrote to memory of 428	3128	1AE46Yf6.exe	71
PID 3128 wrote to memory of 428	3128	1AE46Yf6.exe	71
PID 3128 wrote to memory of 428	3128	1AE46Yf6.exe	71
PID 3128 wrote to memory of 428	3128	1AE46Yf6.exe	71
PID 3128 wrote to memory of 428	3128	1AE46Yf6.exe	71
PID 3128 wrote to memory of 428	3128	1AE46Yf6.exe	71
PID 3128 wrote to memory of 428	3128	1AE46Yf6.exe	71

C:\Users\Admin\AppData\Local\Temp\1AE46Yf6.exe
"C:\Users\Admin\AppData\Local\Temp\1AE46Yf6.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:3128
- C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe
  "C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe"
  2⤵
  PID:428

memory/428-0-0x0000000000400000-0x0000000000432000-memory.dmp

Filesize
200KB

Download
memory/428-4-0x0000000000400000-0x0000000000432000-memory.dmp

Filesize
200KB

Download
memory/428-3-0x0000000000400000-0x0000000000432000-memory.dmp

Filesize
200KB

Download
memory/428-5-0x0000000000400000-0x0000000000432000-memory.dmp

Filesize
200KB

Download
memory/428-6-0x0000000000400000-0x0000000000432000-memory.dmp

Filesize
200KB

Download