ece7b97dcb7fcba52f0b348578e52178bbb7bcc22540ed9123997b90c14323e8

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20231023-en
resource tags

arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
submitted
25/11/2023, 03:38

Target

e59325a169b1a80fd0525ea86e130ff8.exe
Size

601KB
MD5

e59325a169b1a80fd0525ea86e130ff8
SHA1

7c95903106de756f1f55df7f3b4542ac91692f39
SHA256

ece7b97dcb7fcba52f0b348578e52178bbb7bcc22540ed9123997b90c14323e8
SHA512

004cf083a603dd1b5d77a72cd08000605f6afd4d885a7152070ef632ac448971b92f32c8701a053ae91f4c8bed5e500f2696f092efae1b6d716d1d741f292cde
SSDEEP

12288:fy8oXi8ViC92Z8y/2mpBT32oQMwUaQs5+A6JYJL:fFUzN82mpJ2zMwUaQkoJcL

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2096 set thread context of 2088	2096	e59325a169b1a80fd0525ea86e130ff8.exe	28

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2796	2088	WerFault.exe	28

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
2088	e59325a169b1a80fd0525ea86e130ff8.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2096 wrote to memory of 2088	2096	e59325a169b1a80fd0525ea86e130ff8.exe	28
PID 2096 wrote to memory of 2088	2096	e59325a169b1a80fd0525ea86e130ff8.exe	28
PID 2096 wrote to memory of 2088	2096	e59325a169b1a80fd0525ea86e130ff8.exe	28
PID 2096 wrote to memory of 2088	2096	e59325a169b1a80fd0525ea86e130ff8.exe	28
PID 2096 wrote to memory of 2088	2096	e59325a169b1a80fd0525ea86e130ff8.exe	28
PID 2096 wrote to memory of 2088	2096	e59325a169b1a80fd0525ea86e130ff8.exe	28
PID 2096 wrote to memory of 2088	2096	e59325a169b1a80fd0525ea86e130ff8.exe	28
PID 2088 wrote to memory of 2796	2088	e59325a169b1a80fd0525ea86e130ff8.exe	31
PID 2088 wrote to memory of 2796	2088	e59325a169b1a80fd0525ea86e130ff8.exe	31
PID 2088 wrote to memory of 2796	2088	e59325a169b1a80fd0525ea86e130ff8.exe	31
PID 2088 wrote to memory of 2796	2088	e59325a169b1a80fd0525ea86e130ff8.exe	31

memory/2088-7-0x0000000000400000-0x000000000043D000-memory.dmp

Filesize
244KB

Download
memory/2088-16-0x0000000000400000-0x000000000043D000-memory.dmp

Filesize
244KB

Download
memory/2088-15-0x0000000000810000-0x0000000000B13000-memory.dmp

Filesize
3.0MB

Download
memory/2088-13-0x0000000000400000-0x000000000043D000-memory.dmp

Filesize
244KB

Download
memory/2088-11-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2088-9-0x0000000000400000-0x000000000043D000-memory.dmp

Filesize
244KB

Download
memory/2096-3-0x00000000003C0000-0x00000000003D2000-memory.dmp

Filesize
72KB

Download
memory/2096-6-0x0000000004D60000-0x0000000004DDE000-memory.dmp

Filesize
504KB

Download
memory/2096-5-0x0000000000420000-0x000000000042A000-memory.dmp

Filesize
40KB

Download
memory/2096-4-0x0000000000410000-0x0000000000418000-memory.dmp

Filesize
32KB

Download
memory/2096-0-0x0000000000F30000-0x0000000000FCC000-memory.dmp

Filesize
624KB

Download
memory/2096-14-0x0000000074530000-0x0000000074C1E000-memory.dmp

Filesize
6.9MB

Download
memory/2096-2-0x00000000044E0000-0x0000000004520000-memory.dmp

Filesize
256KB

Download
memory/2096-1-0x0000000074530000-0x0000000074C1E000-memory.dmp

Filesize
6.9MB

Download