78c34c1cc152109932ca558cb10ea6a3d153349a4e304f6c3c1bfcc4f85f51f7

Analysis

max time kernel
139s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25/12/2023, 15:48

Target

2a8ef0c085e3231332a42d0b07bf52b2.exe
Size

46KB
MD5

2a8ef0c085e3231332a42d0b07bf52b2
SHA1

e4d8807e498f1bb259b163b2e70e93d81e32f98c
SHA256

78c34c1cc152109932ca558cb10ea6a3d153349a4e304f6c3c1bfcc4f85f51f7
SHA512

b08c96f15efb38dc51c6dc53a5675d4287846926a7500f26070ccdcbe631596159c2483a32e2499e4921856a915f991e74d3dd010107910965232e7c4e69ef46
SSDEEP

768:+ZdIE6mCfDXZXDuT+pxvPDgAiXKZC2p2ng4nGwcsAsn:cpEZXcCvfA2p2nNWsV

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 384 set thread context of 4188	384	2a8ef0c085e3231332a42d0b07bf52b2.exe	20

Suspicious behavior: EnumeratesProcesses 4 IoCs

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 384 wrote to memory of 4188	384	2a8ef0c085e3231332a42d0b07bf52b2.exe	20
PID 384 wrote to memory of 4188	384	2a8ef0c085e3231332a42d0b07bf52b2.exe	20
PID 384 wrote to memory of 4188	384	2a8ef0c085e3231332a42d0b07bf52b2.exe	20
PID 384 wrote to memory of 4188	384	2a8ef0c085e3231332a42d0b07bf52b2.exe	20
PID 384 wrote to memory of 4188	384	2a8ef0c085e3231332a42d0b07bf52b2.exe	20
PID 384 wrote to memory of 4188	384	2a8ef0c085e3231332a42d0b07bf52b2.exe	20
PID 384 wrote to memory of 4188	384	2a8ef0c085e3231332a42d0b07bf52b2.exe	20
PID 4188 wrote to memory of 3512	4188	2a8ef0c085e3231332a42d0b07bf52b2.exe	51
PID 4188 wrote to memory of 3512	4188	2a8ef0c085e3231332a42d0b07bf52b2.exe	51
PID 4188 wrote to memory of 3512	4188	2a8ef0c085e3231332a42d0b07bf52b2.exe	51
PID 4188 wrote to memory of 3512	4188	2a8ef0c085e3231332a42d0b07bf52b2.exe	51

memory/384-1-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/3512-6-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/3512-7-0x000000007FFD0000-0x000000007FFD1000-memory.dmp

Filesize
4KB

Download
memory/4188-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/4188-4-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/4188-0-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/4188-5-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/4188-12-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/4188-10-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download