05daa904c0f5d74fa9d68576663f160822fea756ac9d76890e7fdf620a47eed7

Analysis

max time kernel
150s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25/12/2023, 09:48

Target

15288c7a3cb911b8592f1046ecc9c553.exe
Size

316KB
MD5

15288c7a3cb911b8592f1046ecc9c553
SHA1

17796c6137633705a5156835ecfd9d61b249b6e4
SHA256

05daa904c0f5d74fa9d68576663f160822fea756ac9d76890e7fdf620a47eed7
SHA512

83beddaee68550a747315f29180f2c74a1964eccddc0f8110e1af6d14d6e7d69a3dac25b045baa15a507ff31993ceab3ee5618622cef1763ae67a8ea58e5f88a
SSDEEP

6144:77vjeoTBoGttTiJz92aSF1Fxv4gxc7b3O+PIIhrAB3J4tAOb/ZY3M:7xiJ/SVNChsJODb4M

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 4412 set thread context of 3560	4412	15288c7a3cb911b8592f1046ecc9c553.exe	91

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 4412 wrote to memory of 3560	4412	15288c7a3cb911b8592f1046ecc9c553.exe	91
PID 4412 wrote to memory of 3560	4412	15288c7a3cb911b8592f1046ecc9c553.exe	91
PID 4412 wrote to memory of 3560	4412	15288c7a3cb911b8592f1046ecc9c553.exe	91
PID 4412 wrote to memory of 3560	4412	15288c7a3cb911b8592f1046ecc9c553.exe	91
PID 4412 wrote to memory of 3560	4412	15288c7a3cb911b8592f1046ecc9c553.exe	91
PID 4412 wrote to memory of 3560	4412	15288c7a3cb911b8592f1046ecc9c553.exe	91
PID 4412 wrote to memory of 3560	4412	15288c7a3cb911b8592f1046ecc9c553.exe	91
PID 4412 wrote to memory of 3560	4412	15288c7a3cb911b8592f1046ecc9c553.exe	91

C:\Users\Admin\AppData\Local\Temp\15288c7a3cb911b8592f1046ecc9c553.exe
"C:\Users\Admin\AppData\Local\Temp\15288c7a3cb911b8592f1046ecc9c553.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:4412
- C:\Users\Admin\AppData\Local\Temp\15288c7a3cb911b8592f1046ecc9c553.exe
  "C:\Users\Admin\AppData\Local\Temp\15288c7a3cb911b8592f1046ecc9c553.exe"
  2⤵
  PID:3560

memory/3560-1-0x0000000000400000-0x000000000044C000-memory.dmp

Filesize
304KB

Download
memory/3560-3-0x0000000000400000-0x000000000044C000-memory.dmp

Filesize
304KB

Download
memory/3560-4-0x0000000000400000-0x000000000044C000-memory.dmp

Filesize
304KB

Download
memory/3560-5-0x0000000000400000-0x000000000044C000-memory.dmp

Filesize
304KB

Download
memory/3560-6-0x0000000000400000-0x000000000044C000-memory.dmp

Filesize
304KB

Download
memory/4412-0-0x0000000000400000-0x0000000000455000-memory.dmp

Filesize
340KB

Download
memory/4412-2-0x0000000000400000-0x0000000000455000-memory.dmp

Filesize
340KB

Download