1ed344b140f30375cb0e808e337e3aa4919dbec7ad538c52711f3804933377e7

Analysis

max time kernel
117s
max time network
122s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
01-11-2023 13:54

Target

NEAS.220e628d86dddc198cf51cf5599faed0.exe
Size

27KB
MD5

220e628d86dddc198cf51cf5599faed0
SHA1

713be6d005f0a928ed10e4e5c5b9745eac609949
SHA256

1ed344b140f30375cb0e808e337e3aa4919dbec7ad538c52711f3804933377e7
SHA512

3339c54ee8203cf0bb19da29fe4fc038b9ac6314e59f651ced32354643b82d7ee6c8b42165a848784bd63f14cc3b68c75df3d35be8bc9e86ab8f99297944b260
SSDEEP

384:Zm8dzUpQJ1v2+LLX66/WQRvszgEBAyu69gJPIuw4BqDQybPp13HZ:91UpQJ1vzqMWQk3uLPdw4sDQI3J

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1196 set thread context of 2940	1196	NEAS.220e628d86dddc198cf51cf5599faed0.exe	28

Suspicious use of WriteProcessMemory 9 IoCs

description	pid	Process	procid_target
PID 1196 wrote to memory of 2940	1196	NEAS.220e628d86dddc198cf51cf5599faed0.exe	28
PID 1196 wrote to memory of 2940	1196	NEAS.220e628d86dddc198cf51cf5599faed0.exe	28
PID 1196 wrote to memory of 2940	1196	NEAS.220e628d86dddc198cf51cf5599faed0.exe	28
PID 1196 wrote to memory of 2940	1196	NEAS.220e628d86dddc198cf51cf5599faed0.exe	28
PID 1196 wrote to memory of 2940	1196	NEAS.220e628d86dddc198cf51cf5599faed0.exe	28
PID 1196 wrote to memory of 2940	1196	NEAS.220e628d86dddc198cf51cf5599faed0.exe	28
PID 1196 wrote to memory of 2940	1196	NEAS.220e628d86dddc198cf51cf5599faed0.exe	28
PID 1196 wrote to memory of 2940	1196	NEAS.220e628d86dddc198cf51cf5599faed0.exe	28
PID 1196 wrote to memory of 2940	1196	NEAS.220e628d86dddc198cf51cf5599faed0.exe	28

memory/1196-0-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1196-1-0x0000000000020000-0x000000000002A000-memory.dmp

Filesize
40KB

Download
memory/1196-11-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2940-2-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2940-4-0x0000000000400000-0x0000000000405000-memory.dmp

Filesize
20KB

Download
memory/2940-6-0x0000000000400000-0x0000000000405000-memory.dmp

Filesize
20KB

Download
memory/2940-7-0x00000000001B0000-0x00000000001B0000-memory.dmp

Download