8cdc6bdc96ebc4d8d96274fc3392f616552bc34238eb29ddb47fc894f5f35853

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20231025-en
resource tags

arch:x64arch:x86image:win7-20231025-enlocale:en-usos:windows7-x64system
submitted
31-10-2023 08:59

Target

NEAS.df60aa32eb1ed986af6fc22dc078a4f0.exe
Size

26KB
MD5

df60aa32eb1ed986af6fc22dc078a4f0
SHA1

0def1d184cecba6ff781b9831fc649088e1abff2
SHA256

8cdc6bdc96ebc4d8d96274fc3392f616552bc34238eb29ddb47fc894f5f35853
SHA512

903da96e7ec45aeb9022b967f5a2e75b6ed16f6958bb31cc19fc968897394dd4173f54af6f480835a71abf1c2b355072c9b143b2ac06e19996cd8a95bb5d46f0
SSDEEP

384:FgnNKEzacWL1PRT4J2iw31lKWxyTXbzMD/ajNeSQy7kQ81DHv:FWY93L154J0Q2OEywSQwk7j

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1056 set thread context of 2004	1056	NEAS.df60aa32eb1ed986af6fc22dc078a4f0.exe	28

Suspicious use of WriteProcessMemory 9 IoCs

description	pid	Process	procid_target
PID 1056 wrote to memory of 2004	1056	NEAS.df60aa32eb1ed986af6fc22dc078a4f0.exe	28
PID 1056 wrote to memory of 2004	1056	NEAS.df60aa32eb1ed986af6fc22dc078a4f0.exe	28
PID 1056 wrote to memory of 2004	1056	NEAS.df60aa32eb1ed986af6fc22dc078a4f0.exe	28
PID 1056 wrote to memory of 2004	1056	NEAS.df60aa32eb1ed986af6fc22dc078a4f0.exe	28
PID 1056 wrote to memory of 2004	1056	NEAS.df60aa32eb1ed986af6fc22dc078a4f0.exe	28
PID 1056 wrote to memory of 2004	1056	NEAS.df60aa32eb1ed986af6fc22dc078a4f0.exe	28
PID 1056 wrote to memory of 2004	1056	NEAS.df60aa32eb1ed986af6fc22dc078a4f0.exe	28
PID 1056 wrote to memory of 2004	1056	NEAS.df60aa32eb1ed986af6fc22dc078a4f0.exe	28
PID 1056 wrote to memory of 2004	1056	NEAS.df60aa32eb1ed986af6fc22dc078a4f0.exe	28

memory/1056-0-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1056-1-0x0000000000020000-0x000000000002A000-memory.dmp

Filesize
40KB

Download
memory/1056-11-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2004-2-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2004-4-0x0000000000400000-0x0000000000405000-memory.dmp

Filesize
20KB

Download
memory/2004-6-0x0000000000400000-0x0000000000405000-memory.dmp

Filesize
20KB

Download