7b957a96caa30a08656ce07f2988b423b0979d9f9c585bbae553e5c6d0a43e26

Analysis

max time kernel
143s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25-12-2023 22:17

Target

3f8a8c6421b73fca4e64fc5b2cc912d0.exe
Size

52KB
MD5

3f8a8c6421b73fca4e64fc5b2cc912d0
SHA1

91e2ada688f729749bdd71cae8235de696dc083e
SHA256

7b957a96caa30a08656ce07f2988b423b0979d9f9c585bbae553e5c6d0a43e26
SHA512

3a7e2e306063b70c1c1a771a93178a8d186ff8e26263cf4e2372ec3523de03e36694a6852ad8be10fb24537540edc810e3ee81670dc4f67a11e4c02e6d242192
SSDEEP

1536:fC64GEXqtnz2emH9292/03hZlDNlmZ7EGaMuYB5+wR2:KRGE6Zz2xHQ2/Q3DTmdLuugL

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1520 set thread context of 1668	1520	3f8a8c6421b73fca4e64fc5b2cc912d0.exe	87

Suspicious behavior: EnumeratesProcesses 4 IoCs

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 1520 wrote to memory of 1668	1520	3f8a8c6421b73fca4e64fc5b2cc912d0.exe	87
PID 1520 wrote to memory of 1668	1520	3f8a8c6421b73fca4e64fc5b2cc912d0.exe	87
PID 1520 wrote to memory of 1668	1520	3f8a8c6421b73fca4e64fc5b2cc912d0.exe	87
PID 1520 wrote to memory of 1668	1520	3f8a8c6421b73fca4e64fc5b2cc912d0.exe	87
PID 1520 wrote to memory of 1668	1520	3f8a8c6421b73fca4e64fc5b2cc912d0.exe	87
PID 1668 wrote to memory of 3332	1668	3f8a8c6421b73fca4e64fc5b2cc912d0.exe	41
PID 1668 wrote to memory of 3332	1668	3f8a8c6421b73fca4e64fc5b2cc912d0.exe	41
PID 1668 wrote to memory of 3332	1668	3f8a8c6421b73fca4e64fc5b2cc912d0.exe	41
PID 1668 wrote to memory of 3332	1668	3f8a8c6421b73fca4e64fc5b2cc912d0.exe	41
PID 1668 wrote to memory of 3332	1668	3f8a8c6421b73fca4e64fc5b2cc912d0.exe	41
PID 1668 wrote to memory of 3332	1668	3f8a8c6421b73fca4e64fc5b2cc912d0.exe	41

memory/1668-0-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/1668-1-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download
memory/1668-2-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download
memory/1668-10-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download
memory/3332-3-0x000000007FFF0000-0x000000007FFF1000-memory.dmp

Filesize
4KB

Download
memory/3332-5-0x000000007FFC0000-0x000000007FFC6000-memory.dmp

Filesize
24KB

Download