7b957a96caa30a08656ce07f2988b423b0979d9f9c585bbae553e5c6d0a43e26

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
25/12/2023, 22:17

Target

3f8a8c6421b73fca4e64fc5b2cc912d0.exe
Size

52KB
MD5

3f8a8c6421b73fca4e64fc5b2cc912d0
SHA1

91e2ada688f729749bdd71cae8235de696dc083e
SHA256

7b957a96caa30a08656ce07f2988b423b0979d9f9c585bbae553e5c6d0a43e26
SHA512

3a7e2e306063b70c1c1a771a93178a8d186ff8e26263cf4e2372ec3523de03e36694a6852ad8be10fb24537540edc810e3ee81670dc4f67a11e4c02e6d242192
SSDEEP

1536:fC64GEXqtnz2emH9292/03hZlDNlmZ7EGaMuYB5+wR2:KRGE6Zz2xHQ2/Q3DTmdLuugL

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1932 set thread context of 1704	1932	3f8a8c6421b73fca4e64fc5b2cc912d0.exe	28

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1704	3f8a8c6421b73fca4e64fc5b2cc912d0.exe
1704	3f8a8c6421b73fca4e64fc5b2cc912d0.exe

Suspicious use of WriteProcessMemory 12 IoCs

description	pid	Process	procid_target
PID 1932 wrote to memory of 1704	1932	3f8a8c6421b73fca4e64fc5b2cc912d0.exe	28
PID 1932 wrote to memory of 1704	1932	3f8a8c6421b73fca4e64fc5b2cc912d0.exe	28
PID 1932 wrote to memory of 1704	1932	3f8a8c6421b73fca4e64fc5b2cc912d0.exe	28
PID 1932 wrote to memory of 1704	1932	3f8a8c6421b73fca4e64fc5b2cc912d0.exe	28
PID 1932 wrote to memory of 1704	1932	3f8a8c6421b73fca4e64fc5b2cc912d0.exe	28
PID 1932 wrote to memory of 1704	1932	3f8a8c6421b73fca4e64fc5b2cc912d0.exe	28
PID 1704 wrote to memory of 1284	1704	3f8a8c6421b73fca4e64fc5b2cc912d0.exe	7
PID 1704 wrote to memory of 1284	1704	3f8a8c6421b73fca4e64fc5b2cc912d0.exe	7
PID 1704 wrote to memory of 1284	1704	3f8a8c6421b73fca4e64fc5b2cc912d0.exe	7
PID 1704 wrote to memory of 1284	1704	3f8a8c6421b73fca4e64fc5b2cc912d0.exe	7
PID 1704 wrote to memory of 1284	1704	3f8a8c6421b73fca4e64fc5b2cc912d0.exe	7
PID 1704 wrote to memory of 1284	1704	3f8a8c6421b73fca4e64fc5b2cc912d0.exe	7

memory/1284-5-0x000000007FFF0000-0x000000007FFF1000-memory.dmp

Filesize
4KB

Download
memory/1284-11-0x000000007EFC0000-0x000000007EFC6000-memory.dmp

Filesize
24KB

Download
memory/1704-0-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/1704-3-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/1704-4-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download
memory/1704-2-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download
memory/1704-24-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download