4a15f18dc5d0185e0790ab46c042c06566077a3c9e34f7d7f208dbf6eca00592

Analysis

max time kernel
137s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
24/12/2023, 16:07

Target

04f090a5bbed71bb711a792fcfafb956.exe
Size

325KB
MD5

04f090a5bbed71bb711a792fcfafb956
SHA1

61dbab0fd86c0290fe15ab910dcf8d65b495e0e0
SHA256

4a15f18dc5d0185e0790ab46c042c06566077a3c9e34f7d7f208dbf6eca00592
SHA512

858f2fc24942ebe0a38a3b8636f0c9214fec24fbcc51000fbb3962934dee7a7b4210a1c68c1b9fe08af86185954cd00d5ad1f740793490a210384fb2d7ee3378
SSDEEP

6144:gVVVVVVV1rVz1196xLukxCiFo5J5ufJHy/r7GOmh96BPI:gVVVVVVV/z11YxLuICiFo5J5u9qoyC

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2688 set thread context of 4544	2688	04f090a5bbed71bb711a792fcfafb956.exe	91

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 2688 wrote to memory of 4544	2688	04f090a5bbed71bb711a792fcfafb956.exe	91
PID 2688 wrote to memory of 4544	2688	04f090a5bbed71bb711a792fcfafb956.exe	91
PID 2688 wrote to memory of 4544	2688	04f090a5bbed71bb711a792fcfafb956.exe	91
PID 2688 wrote to memory of 4544	2688	04f090a5bbed71bb711a792fcfafb956.exe	91
PID 2688 wrote to memory of 4544	2688	04f090a5bbed71bb711a792fcfafb956.exe	91
PID 2688 wrote to memory of 4544	2688	04f090a5bbed71bb711a792fcfafb956.exe	91
PID 2688 wrote to memory of 4544	2688	04f090a5bbed71bb711a792fcfafb956.exe	91
PID 2688 wrote to memory of 4544	2688	04f090a5bbed71bb711a792fcfafb956.exe	91

C:\Users\Admin\AppData\Local\Temp\04f090a5bbed71bb711a792fcfafb956.exe
"C:\Users\Admin\AppData\Local\Temp\04f090a5bbed71bb711a792fcfafb956.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:2688
- C:\Users\Admin\AppData\Local\Temp\04f090a5bbed71bb711a792fcfafb956.exe
  "C:\Users\Admin\AppData\Local\Temp\04f090a5bbed71bb711a792fcfafb956.exe"
  2⤵
  PID:4544

memory/2688-0-0x0000000000400000-0x0000000000456000-memory.dmp

Filesize
344KB

Download
memory/2688-2-0x0000000000400000-0x0000000000456000-memory.dmp

Filesize
344KB

Download
memory/4544-1-0x0000000000400000-0x0000000000444000-memory.dmp

Filesize
272KB

Download
memory/4544-4-0x0000000000400000-0x0000000000444000-memory.dmp

Filesize
272KB

Download
memory/4544-5-0x0000000000400000-0x0000000000444000-memory.dmp

Filesize
272KB

Download
memory/4544-6-0x0000000000400000-0x0000000000444000-memory.dmp

Filesize
272KB

Download