db2a2d7c0772591199f7d3be76fd05031487f14b888efaa626d167397130c86b

Analysis

max time kernel
128s
max time network
133s
platform
windows10-2004_x64
resource
win10v2004-20231127-en
resource tags

arch:x64arch:x86image:win10v2004-20231127-enlocale:en-usos:windows10-2004-x64system
submitted
02-12-2023 10:26

Target

e164c86cf3eead4541a719f3cc5f08a7f0b36384fb8e95098116acadad23a69b.exe
Size

3.2MB
MD5

f23d61d5ff249493e4b55e0690d7b3e4
SHA1

a6eccac18cc49aa7fe3863afb24d3975a5cf30a8
SHA256

e164c86cf3eead4541a719f3cc5f08a7f0b36384fb8e95098116acadad23a69b
SHA512

1782f63dc64baaf47d00ad0f8cf7d04587f8da2656aedf580147387df65b9481e4fdd7a4e34c6f01dfbefc4815d42a994dc7e6e065c84d2cf9821e602ac2446f
SSDEEP

49152:3osVZWC0R4XRbTaDmixqWsOFQlrYQBDcLatzB+L0iVBH+nBz0I7C:3Z0RkRbTaDmcsOFQpEwIN+d0n

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

Processes:

e164c86cf3eead4541a719f3cc5f08a7f0b36384fb8e95098116acadad23a69b.exe

description	pid	process	target process
PID 2564 set thread context of 2796	2564	e164c86cf3eead4541a719f3cc5f08a7f0b36384fb8e95098116acadad23a69b.exe	jsc.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

e164c86cf3eead4541a719f3cc5f08a7f0b36384fb8e95098116acadad23a69b.exe

description pid process

Token: SeDebugPrivilege 2564 e164c86cf3eead4541a719f3cc5f08a7f0b36384fb8e95098116acadad23a69b.exe

description	pid	process
Token: SeDebugPrivilege	2564	e164c86cf3eead4541a719f3cc5f08a7f0b36384fb8e95098116acadad23a69b.exe

Suspicious use of WriteProcessMemory 9 IoCs

Processes:

e164c86cf3eead4541a719f3cc5f08a7f0b36384fb8e95098116acadad23a69b.exe

description	pid	process	target process
PID 2564 wrote to memory of 2796	2564	e164c86cf3eead4541a719f3cc5f08a7f0b36384fb8e95098116acadad23a69b.exe	jsc.exe
PID 2564 wrote to memory of 2796	2564	e164c86cf3eead4541a719f3cc5f08a7f0b36384fb8e95098116acadad23a69b.exe	jsc.exe
PID 2564 wrote to memory of 2796	2564	e164c86cf3eead4541a719f3cc5f08a7f0b36384fb8e95098116acadad23a69b.exe	jsc.exe
PID 2564 wrote to memory of 2796	2564	e164c86cf3eead4541a719f3cc5f08a7f0b36384fb8e95098116acadad23a69b.exe	jsc.exe
PID 2564 wrote to memory of 2796	2564	e164c86cf3eead4541a719f3cc5f08a7f0b36384fb8e95098116acadad23a69b.exe	jsc.exe
PID 2564 wrote to memory of 2796	2564	e164c86cf3eead4541a719f3cc5f08a7f0b36384fb8e95098116acadad23a69b.exe	jsc.exe
PID 2564 wrote to memory of 2796	2564	e164c86cf3eead4541a719f3cc5f08a7f0b36384fb8e95098116acadad23a69b.exe	jsc.exe
PID 2564 wrote to memory of 2796	2564	e164c86cf3eead4541a719f3cc5f08a7f0b36384fb8e95098116acadad23a69b.exe	jsc.exe
PID 2564 wrote to memory of 2796	2564	e164c86cf3eead4541a719f3cc5f08a7f0b36384fb8e95098116acadad23a69b.exe	jsc.exe

C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe
2⤵
PID:2796

memory/2564-6-0x0000000006580000-0x00000000065E8000-memory.dmp

Filesize
416KB

Download
memory/2564-8-0x0000000006C40000-0x00000000071E4000-memory.dmp

Filesize
5.6MB

Download
memory/2564-2-0x0000000005C20000-0x0000000005C30000-memory.dmp

Filesize
64KB

Download
memory/2564-3-0x0000000005C60000-0x0000000005C6E000-memory.dmp

Filesize
56KB

Download
memory/2564-4-0x0000000006400000-0x0000000006480000-memory.dmp

Filesize
512KB

Download
memory/2564-5-0x0000000006510000-0x0000000006578000-memory.dmp

Filesize
416KB

Download
memory/2564-1-0x00000000748C0000-0x0000000075070000-memory.dmp

Filesize
7.7MB

Download
memory/2564-7-0x0000000006610000-0x000000000665C000-memory.dmp

Filesize
304KB

Download
memory/2564-0-0x0000000000FA0000-0x000000000120A000-memory.dmp

Filesize
2.4MB

Download
memory/2564-13-0x00000000748C0000-0x0000000075070000-memory.dmp

Filesize
7.7MB

Download
memory/2796-11-0x0000000000400000-0x000000000047E000-memory.dmp

Filesize
504KB

Download
memory/2796-12-0x0000000000400000-0x000000000047E000-memory.dmp

Filesize
504KB

Download
memory/2796-9-0x0000000000400000-0x000000000047E000-memory.dmp

Filesize
504KB

Download
memory/2796-14-0x0000000000400000-0x000000000047E000-memory.dmp

Filesize
504KB

Download
memory/2796-15-0x0000000000400000-0x000000000047E000-memory.dmp

Filesize
504KB

Download