35e7419c8a1a3752c9be2cb171045eb779f5252071cc32cde8405338f99cb29c

Analysis

max time kernel
157s
max time network
167s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25/12/2023, 08:04

Target

10d6f82593674627b24d5c1f67686716.exe
Size

130KB
MD5

10d6f82593674627b24d5c1f67686716
SHA1

45970b39988046546df43b185204073bb5424bfe
SHA256

35e7419c8a1a3752c9be2cb171045eb779f5252071cc32cde8405338f99cb29c
SHA512

60b4091e5701290dab1151eaafe1f9faecc7eff01f6cd5a77cf595eae6a4ce94e81b895371c1514e7f38c8f9cf1f29e5c6f75997a6fbb82e6c0e8f2470645faf
SSDEEP

3072:yeKxZj6IBV6rz3uA70He/jjKGJw/0XidmuaFbWav:yFxZjvVUz3A+7jJJY0CQWU

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2848 set thread context of 2080	2848	10d6f82593674627b24d5c1f67686716.exe	90

Suspicious behavior: EnumeratesProcesses 4 IoCs

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2848	10d6f82593674627b24d5c1f67686716.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2848 wrote to memory of 2080	2848	10d6f82593674627b24d5c1f67686716.exe	90
PID 2848 wrote to memory of 2080	2848	10d6f82593674627b24d5c1f67686716.exe	90
PID 2848 wrote to memory of 2080	2848	10d6f82593674627b24d5c1f67686716.exe	90
PID 2848 wrote to memory of 2080	2848	10d6f82593674627b24d5c1f67686716.exe	90
PID 2848 wrote to memory of 2080	2848	10d6f82593674627b24d5c1f67686716.exe	90
PID 2848 wrote to memory of 2080	2848	10d6f82593674627b24d5c1f67686716.exe	90
PID 2848 wrote to memory of 2080	2848	10d6f82593674627b24d5c1f67686716.exe	90
PID 2080 wrote to memory of 3360	2080	10d6f82593674627b24d5c1f67686716.exe	56
PID 2080 wrote to memory of 3360	2080	10d6f82593674627b24d5c1f67686716.exe	56
PID 2080 wrote to memory of 3360	2080	10d6f82593674627b24d5c1f67686716.exe	56
PID 2080 wrote to memory of 3360	2080	10d6f82593674627b24d5c1f67686716.exe	56

memory/2080-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2080-4-0x0000000000400000-0x0000000000408960-memory.dmp

Filesize
34KB

Download
memory/2080-6-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2080-7-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2080-9-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/2080-14-0x0000000000410000-0x00000000004D9000-memory.dmp

Filesize
804KB

Download
memory/2080-15-0x0000000000400000-0x0000000000408960-memory.dmp

Filesize
34KB

Download
memory/2080-16-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/2848-0-0x0000000000400000-0x00000000004BA000-memory.dmp

Filesize
744KB

Download
memory/2848-8-0x0000000000400000-0x00000000004BA000-memory.dmp

Filesize
744KB

Download
memory/3360-10-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/3360-11-0x000000007FFD0000-0x000000007FFD1000-memory.dmp

Filesize
4KB

Download