6334f9b75722e7d299d94496d354cbf274e811ebce1b9cab9013cf57c1d6800d

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25/12/2023, 05:01

Target

6334f9b75722e7d299d94496d354cbf274e811ebce1b9cab9013cf57c1d6800d.exe
Size

323KB
MD5

9101e767e0d4cc945525f9d0a196ff1d
SHA1

ef1d294af44497c7eeb8c8161b37669f3ae0da9f
SHA256

6334f9b75722e7d299d94496d354cbf274e811ebce1b9cab9013cf57c1d6800d
SHA512

9021e1db9bc0d2073816652537de16903384bebb41480df9aa982f5efa78d7761f86be82bf6d7c0f238e43dfbbd016dfe3766424273979ea6228215aa708e28c
SSDEEP

6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2408 set thread context of 2092	2408	6334f9b75722e7d299d94496d354cbf274e811ebce1b9cab9013cf57c1d6800d.exe	28

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2888	2092	WerFault.exe	28

Suspicious use of WriteProcessMemory 13 IoCs

description	pid	Process	procid_target
PID 2408 wrote to memory of 2092	2408	6334f9b75722e7d299d94496d354cbf274e811ebce1b9cab9013cf57c1d6800d.exe	28
PID 2408 wrote to memory of 2092	2408	6334f9b75722e7d299d94496d354cbf274e811ebce1b9cab9013cf57c1d6800d.exe	28
PID 2408 wrote to memory of 2092	2408	6334f9b75722e7d299d94496d354cbf274e811ebce1b9cab9013cf57c1d6800d.exe	28
PID 2408 wrote to memory of 2092	2408	6334f9b75722e7d299d94496d354cbf274e811ebce1b9cab9013cf57c1d6800d.exe	28
PID 2408 wrote to memory of 2092	2408	6334f9b75722e7d299d94496d354cbf274e811ebce1b9cab9013cf57c1d6800d.exe	28
PID 2408 wrote to memory of 2092	2408	6334f9b75722e7d299d94496d354cbf274e811ebce1b9cab9013cf57c1d6800d.exe	28
PID 2408 wrote to memory of 2092	2408	6334f9b75722e7d299d94496d354cbf274e811ebce1b9cab9013cf57c1d6800d.exe	28
PID 2408 wrote to memory of 2092	2408	6334f9b75722e7d299d94496d354cbf274e811ebce1b9cab9013cf57c1d6800d.exe	28
PID 2408 wrote to memory of 2092	2408	6334f9b75722e7d299d94496d354cbf274e811ebce1b9cab9013cf57c1d6800d.exe	28
PID 2092 wrote to memory of 2888	2092	6334f9b75722e7d299d94496d354cbf274e811ebce1b9cab9013cf57c1d6800d.exe	29
PID 2092 wrote to memory of 2888	2092	6334f9b75722e7d299d94496d354cbf274e811ebce1b9cab9013cf57c1d6800d.exe	29
PID 2092 wrote to memory of 2888	2092	6334f9b75722e7d299d94496d354cbf274e811ebce1b9cab9013cf57c1d6800d.exe	29
PID 2092 wrote to memory of 2888	2092	6334f9b75722e7d299d94496d354cbf274e811ebce1b9cab9013cf57c1d6800d.exe	29

memory/2092-9-0x0000000000400000-0x0000000000406000-memory.dmp

Filesize
24KB

Download
memory/2092-14-0x0000000000400000-0x0000000000406000-memory.dmp

Filesize
24KB

Download
memory/2092-12-0x0000000000400000-0x0000000000406000-memory.dmp

Filesize
24KB

Download
memory/2092-10-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2092-8-0x0000000000400000-0x0000000000406000-memory.dmp

Filesize
24KB

Download
memory/2092-7-0x0000000000400000-0x0000000000406000-memory.dmp

Filesize
24KB

Download
memory/2092-5-0x0000000000400000-0x0000000000406000-memory.dmp

Filesize
24KB

Download
memory/2408-1-0x0000000074D40000-0x000000007542E000-memory.dmp

Filesize
6.9MB

Download
memory/2408-2-0x0000000006FD0000-0x000000000709C000-memory.dmp

Filesize
816KB

Download
memory/2408-3-0x00000000003A0000-0x00000000003A6000-memory.dmp

Filesize
24KB

Download
memory/2408-4-0x00000000049B0000-0x00000000049F0000-memory.dmp

Filesize
256KB

Download
memory/2408-15-0x0000000074D40000-0x000000007542E000-memory.dmp

Filesize
6.9MB

Download
memory/2408-0-0x0000000000310000-0x0000000000366000-memory.dmp

Filesize
344KB

Download