54d7e8c30ef6eaad396343cc43687985da9ecbded8038494d07c7972d0af7fa0

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25/12/2023, 05:23

Target

07ba5cc3973c69734c0aa65688d44577.exe
Size

892KB
MD5

07ba5cc3973c69734c0aa65688d44577
SHA1

0f719ef9d60186b7addcd70f48cfc8b32b8d9af9
SHA256

54d7e8c30ef6eaad396343cc43687985da9ecbded8038494d07c7972d0af7fa0
SHA512

9f4088d46220e733a46024fe7e3ab1feb51ec1225d64f93bbfd2d58df070df8e5be841e548775b35df42ee2cdf5da0ebddb47e6265eaf00ef64107d683bdd074
SSDEEP

6144:Sdceluelu9T1Q/pZ1RK89hbg4HoSQmG4c:c810Hk4OtH

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1712 set thread context of 1728	1712	07ba5cc3973c69734c0aa65688d44577.exe	19

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1712	07ba5cc3973c69734c0aa65688d44577.exe

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 1712 wrote to memory of 1728	1712	07ba5cc3973c69734c0aa65688d44577.exe	19
PID 1712 wrote to memory of 1728	1712	07ba5cc3973c69734c0aa65688d44577.exe	19
PID 1712 wrote to memory of 1728	1712	07ba5cc3973c69734c0aa65688d44577.exe	19
PID 1712 wrote to memory of 1728	1712	07ba5cc3973c69734c0aa65688d44577.exe	19
PID 1712 wrote to memory of 1728	1712	07ba5cc3973c69734c0aa65688d44577.exe	19
PID 1712 wrote to memory of 1728	1712	07ba5cc3973c69734c0aa65688d44577.exe	19
PID 1712 wrote to memory of 1728	1712	07ba5cc3973c69734c0aa65688d44577.exe	19
PID 1712 wrote to memory of 1728	1712	07ba5cc3973c69734c0aa65688d44577.exe	19

C:\Users\Admin\AppData\Local\Temp\07ba5cc3973c69734c0aa65688d44577.exe
"C:\Users\Admin\AppData\Local\Temp\07ba5cc3973c69734c0aa65688d44577.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1712
- C:\Users\Admin\AppData\Local\Temp\07ba5cc3973c69734c0aa65688d44577.exe
  "C:\Users\Admin\AppData\Local\Temp\07ba5cc3973c69734c0aa65688d44577.exe"
  2⤵
  PID:1728

memory/1712-1-0x0000000000400000-0x00000000004DF000-memory.dmp

Filesize
892KB

Download
memory/1712-6-0x0000000000400000-0x00000000004DF000-memory.dmp

Filesize
892KB

Download
memory/1712-12-0x0000000002830000-0x000000000290F000-memory.dmp

Filesize
892KB

Download
memory/1728-7-0x0000000000400000-0x0000000000408960-memory.dmp

Filesize
34KB

Download
memory/1728-8-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1728-5-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1728-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1728-11-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/1728-10-0x0000000000400000-0x0000000000408960-memory.dmp

Filesize
34KB

Download