03a756214e72b920f416f3b5e622194f18641bdff0e6e686d90944b49c520d15

Analysis

max time kernel
141s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25-12-2023 16:00

Target

2b4eea5c453b245f39a5a401471d587e.exe
Size

161KB
MD5

2b4eea5c453b245f39a5a401471d587e
SHA1

9dfe737a7bf9e9c1a05af845a718c56afe65e5b7
SHA256

03a756214e72b920f416f3b5e622194f18641bdff0e6e686d90944b49c520d15
SHA512

af4d05467eac5df5901ecc72c92ad59fc8bf82739848c84c0c32ecb4fe893eba6ede02f18a4639acd8467af487b932f929c35f49411d1dfbc5247f02edb7cbc2
SSDEEP

3072:sp3s4IBbK9FK+Tvd9RyooAKAgFdxGNQUQgCUwOa2YZjecwqVlPbkvsRrvSlcT:6stbKntZvyjToNbC2a/TVJbPRralU

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 3056 set thread context of 3068	3056	2b4eea5c453b245f39a5a401471d587e.exe	28

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2940	3068	WerFault.exe	28

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 3056 wrote to memory of 3068	3056	2b4eea5c453b245f39a5a401471d587e.exe	28
PID 3056 wrote to memory of 3068	3056	2b4eea5c453b245f39a5a401471d587e.exe	28
PID 3056 wrote to memory of 3068	3056	2b4eea5c453b245f39a5a401471d587e.exe	28
PID 3056 wrote to memory of 3068	3056	2b4eea5c453b245f39a5a401471d587e.exe	28
PID 3056 wrote to memory of 3068	3056	2b4eea5c453b245f39a5a401471d587e.exe	28
PID 3056 wrote to memory of 3068	3056	2b4eea5c453b245f39a5a401471d587e.exe	28
PID 3068 wrote to memory of 2940	3068	2b4eea5c453b245f39a5a401471d587e.exe	29
PID 3068 wrote to memory of 2940	3068	2b4eea5c453b245f39a5a401471d587e.exe	29
PID 3068 wrote to memory of 2940	3068	2b4eea5c453b245f39a5a401471d587e.exe	29
PID 3068 wrote to memory of 2940	3068	2b4eea5c453b245f39a5a401471d587e.exe	29

memory/3056-0-0x0000000000400000-0x0000000000426000-memory.dmp

Filesize
152KB

Download
memory/3056-3-0x0000000000400000-0x0000000000426000-memory.dmp

Filesize
152KB

Download
memory/3068-4-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download
memory/3068-1-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download