d8dc425537c8bb6e195a5292632bc5845257a7e003d34e3c569012244c33b36d

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
25/12/2023, 05:19

Target

d8dc425537c8bb6e195a5292632bc5845257a7e003d34e3c569012244c33b36d.exe
Size

323KB
MD5

e4dc5beb9a77a85124fb5a61dea31f21
SHA1

ed04e4573e70d77642d4fa964d56e99c9bcd67ed
SHA256

d8dc425537c8bb6e195a5292632bc5845257a7e003d34e3c569012244c33b36d
SHA512

b404dd5da9333323de1af815e0c52e2904c0407a5094784d32388d78627b40b9b3d27885a44457941e654b227783d1773feb0da2494f66af44732ce10aa5f6b3
SSDEEP

6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2216 set thread context of 3000	2216	d8dc425537c8bb6e195a5292632bc5845257a7e003d34e3c569012244c33b36d.exe	20

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1944	3000	WerFault.exe	20

Suspicious use of WriteProcessMemory 13 IoCs

description	pid	Process	procid_target
PID 2216 wrote to memory of 3000	2216	d8dc425537c8bb6e195a5292632bc5845257a7e003d34e3c569012244c33b36d.exe	20
PID 2216 wrote to memory of 3000	2216	d8dc425537c8bb6e195a5292632bc5845257a7e003d34e3c569012244c33b36d.exe	20
PID 2216 wrote to memory of 3000	2216	d8dc425537c8bb6e195a5292632bc5845257a7e003d34e3c569012244c33b36d.exe	20
PID 2216 wrote to memory of 3000	2216	d8dc425537c8bb6e195a5292632bc5845257a7e003d34e3c569012244c33b36d.exe	20
PID 2216 wrote to memory of 3000	2216	d8dc425537c8bb6e195a5292632bc5845257a7e003d34e3c569012244c33b36d.exe	20
PID 2216 wrote to memory of 3000	2216	d8dc425537c8bb6e195a5292632bc5845257a7e003d34e3c569012244c33b36d.exe	20
PID 2216 wrote to memory of 3000	2216	d8dc425537c8bb6e195a5292632bc5845257a7e003d34e3c569012244c33b36d.exe	20
PID 2216 wrote to memory of 3000	2216	d8dc425537c8bb6e195a5292632bc5845257a7e003d34e3c569012244c33b36d.exe	20
PID 2216 wrote to memory of 3000	2216	d8dc425537c8bb6e195a5292632bc5845257a7e003d34e3c569012244c33b36d.exe	20
PID 3000 wrote to memory of 1944	3000	d8dc425537c8bb6e195a5292632bc5845257a7e003d34e3c569012244c33b36d.exe	29
PID 3000 wrote to memory of 1944	3000	d8dc425537c8bb6e195a5292632bc5845257a7e003d34e3c569012244c33b36d.exe	29
PID 3000 wrote to memory of 1944	3000	d8dc425537c8bb6e195a5292632bc5845257a7e003d34e3c569012244c33b36d.exe	29
PID 3000 wrote to memory of 1944	3000	d8dc425537c8bb6e195a5292632bc5845257a7e003d34e3c569012244c33b36d.exe	29

memory/2216-0-0x0000000000FB0000-0x0000000001006000-memory.dmp

Filesize
344KB

Download
memory/2216-1-0x0000000074060000-0x000000007474E000-memory.dmp

Filesize
6.9MB

Download
memory/2216-2-0x0000000004410000-0x00000000044DC000-memory.dmp

Filesize
816KB

Download
memory/2216-3-0x00000000004C0000-0x00000000004C6000-memory.dmp

Filesize
24KB

Download
memory/2216-4-0x00000000049C0000-0x0000000004A00000-memory.dmp

Filesize
256KB

Download
memory/2216-16-0x0000000074060000-0x000000007474E000-memory.dmp

Filesize
6.9MB

Download
memory/3000-15-0x0000000000400000-0x0000000000406000-memory.dmp

Filesize
24KB

Download
memory/3000-13-0x0000000000400000-0x0000000000406000-memory.dmp

Filesize
24KB

Download
memory/3000-11-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/3000-9-0x0000000000400000-0x0000000000406000-memory.dmp

Filesize
24KB

Download
memory/3000-8-0x0000000000400000-0x0000000000406000-memory.dmp

Filesize
24KB

Download
memory/3000-7-0x0000000000400000-0x0000000000406000-memory.dmp

Filesize
24KB

Download
memory/3000-5-0x0000000000400000-0x0000000000406000-memory.dmp

Filesize
24KB

Download