bdc709694217d752a2d80c71ca3976ef60af24a037b7ee48f5aa363740dbab05

Analysis

max time kernel
122s
max time network
147s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25-12-2023 13:51

Target

23362bd82f2b728d9fa29aacb6cc5f63.exe
Size

60KB
MD5

23362bd82f2b728d9fa29aacb6cc5f63
SHA1

8bfc38d809b223e6bce18598a574ded14d1e1fef
SHA256

bdc709694217d752a2d80c71ca3976ef60af24a037b7ee48f5aa363740dbab05
SHA512

da1acdab0f4298949cf71830113ca73fbd54713d25e8ad71d797a7cd4f0190540d3e1ca9715b949fcb35d6aca9ce42615ea16ec85dd767ff0ef69d051c84b9f6
SSDEEP

1536:eH7m1pcTY+rcKN2rnobvXWjy2rZDVmYtLYS:MOy2rhVV

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2876 set thread context of 2588	2876	23362bd82f2b728d9fa29aacb6cc5f63.exe	29

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 2876 wrote to memory of 2588	2876	23362bd82f2b728d9fa29aacb6cc5f63.exe	29
PID 2876 wrote to memory of 2588	2876	23362bd82f2b728d9fa29aacb6cc5f63.exe	29
PID 2876 wrote to memory of 2588	2876	23362bd82f2b728d9fa29aacb6cc5f63.exe	29
PID 2876 wrote to memory of 2588	2876	23362bd82f2b728d9fa29aacb6cc5f63.exe	29
PID 2876 wrote to memory of 2588	2876	23362bd82f2b728d9fa29aacb6cc5f63.exe	29
PID 2876 wrote to memory of 2588	2876	23362bd82f2b728d9fa29aacb6cc5f63.exe	29

C:\Users\Admin\AppData\Local\Temp\23362bd82f2b728d9fa29aacb6cc5f63.exe
"C:\Users\Admin\AppData\Local\Temp\23362bd82f2b728d9fa29aacb6cc5f63.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:2876
- C:\Users\Admin\AppData\Local\Temp\23362bd82f2b728d9fa29aacb6cc5f63.exe
  "C:\Users\Admin\AppData\Local\Temp\23362bd82f2b728d9fa29aacb6cc5f63.exe"
  2⤵
  PID:2588

memory/2588-1-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2588-3-0x0000000000400000-0x0000000000405000-memory.dmp

Filesize
20KB

Download
memory/2588-6-0x0000000000400000-0x0000000000405000-memory.dmp

Filesize
20KB

Download
memory/2876-5-0x0000000000250000-0x0000000000262000-memory.dmp

Filesize
72KB

Download
memory/2876-0-0x0000000001000000-0x0000000001012000-memory.dmp

Filesize
72KB

Download
memory/2876-8-0x0000000001000000-0x0000000001012000-memory.dmp

Filesize
72KB

Download