e1bfd1e46b3a2f96c03a03decb7d7a3d847d36bf3831f4bc4dc2f8a31a684b38

Analysis

max time kernel
95s
max time network
134s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
24/12/2023, 14:58

Target

029bb26a09c5c24d6f21ebff0a424337.exe
Size

144KB
MD5

029bb26a09c5c24d6f21ebff0a424337
SHA1

8165f6234d0bc58f4e6136d2e306edf16b60e012
SHA256

e1bfd1e46b3a2f96c03a03decb7d7a3d847d36bf3831f4bc4dc2f8a31a684b38
SHA512

7314daabacb135dabbd4e07233c082404a6910da022db6af10271bf0f1f9eefc8104c672002ec38eb49b2a95dee0f5476e804c914a7fdeed09fd0262ccd5d089
SSDEEP

3072:zeB2RL2jkC0lt0ZzLkA3l9nIwfYpJ2Xrw0I5DS5DD:YUCoC0lt0Zx3l9Iwf1teDgDD

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 4468 set thread context of 4664	4468	029bb26a09c5c24d6f21ebff0a424337.exe	88

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4468	029bb26a09c5c24d6f21ebff0a424337.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 4468 wrote to memory of 4664	4468	029bb26a09c5c24d6f21ebff0a424337.exe	88
PID 4468 wrote to memory of 4664	4468	029bb26a09c5c24d6f21ebff0a424337.exe	88
PID 4468 wrote to memory of 4664	4468	029bb26a09c5c24d6f21ebff0a424337.exe	88
PID 4468 wrote to memory of 4664	4468	029bb26a09c5c24d6f21ebff0a424337.exe	88
PID 4468 wrote to memory of 4664	4468	029bb26a09c5c24d6f21ebff0a424337.exe	88
PID 4468 wrote to memory of 4664	4468	029bb26a09c5c24d6f21ebff0a424337.exe	88
PID 4468 wrote to memory of 4664	4468	029bb26a09c5c24d6f21ebff0a424337.exe	88

C:\Users\Admin\AppData\Local\Temp\029bb26a09c5c24d6f21ebff0a424337.exe
"C:\Users\Admin\AppData\Local\Temp\029bb26a09c5c24d6f21ebff0a424337.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4468
- C:\Users\Admin\AppData\Local\Temp\029bb26a09c5c24d6f21ebff0a424337.exe
  C:\Users\Admin\AppData\Local\Temp\029bb26a09c5c24d6f21ebff0a424337.exe
  2⤵
  PID:4664

memory/4468-0-0x0000000000400000-0x000000000044E000-memory.dmp

Filesize
312KB

Download
memory/4468-2-0x0000000000400000-0x000000000044E000-memory.dmp

Filesize
312KB

Download
memory/4468-7-0x0000000000400000-0x000000000044E000-memory.dmp

Filesize
312KB

Download
memory/4664-4-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/4664-8-0x0000000000400000-0x00000000004083A0-memory.dmp

Filesize
32KB

Download
memory/4664-9-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/4664-6-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/4664-10-0x0000000010000000-0x0000000010012000-memory.dmp

Filesize
72KB

Download
memory/4664-11-0x0000000000410000-0x00000000004D9000-memory.dmp

Filesize
804KB

Download