1ab729f0884b5a838d7d34a61741c4cd8ecc07899e8a9611a76607f65ef009b5

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25-12-2023 17:24

Target

setup.exe
Size

235KB
MD5

c217b70c0c92735ceb0e8a04cc36941b
SHA1

f11aa386af27994ba03efba4ba15024a59a57eb1
SHA256

014a384e4f31e5f7271fb08a39faec06f1165fffa1d2e43b418384bf4c342eae
SHA512

a8f78690b865b1c3f6cdfdc9f63b9149d247c4eb1379c9dd1cca5a025390d5e9ed37da985279bee7d3ed8a8480028d06dc84161c17ab988d9f3af5f886637912
SSDEEP

6144:bqY9SC2DqBRhVh8njm9VCwH+ep7Ld7GKI7uO:WYMusnjmLjbiKC/

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2612 set thread context of 2956	2612	setup.exe	28

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2956	setup.exe
2956	setup.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2612	setup.exe

Suspicious use of WriteProcessMemory 15 IoCs

description	pid	Process	procid_target
PID 2612 wrote to memory of 2956	2612	setup.exe	28
PID 2612 wrote to memory of 2956	2612	setup.exe	28
PID 2612 wrote to memory of 2956	2612	setup.exe	28
PID 2612 wrote to memory of 2956	2612	setup.exe	28
PID 2612 wrote to memory of 2956	2612	setup.exe	28
PID 2612 wrote to memory of 2956	2612	setup.exe	28
PID 2612 wrote to memory of 2956	2612	setup.exe	28
PID 2612 wrote to memory of 2956	2612	setup.exe	28
PID 2612 wrote to memory of 2956	2612	setup.exe	28
PID 2612 wrote to memory of 2956	2612	setup.exe	28
PID 2612 wrote to memory of 2956	2612	setup.exe	28
PID 2956 wrote to memory of 1248	2956	setup.exe	8
PID 2956 wrote to memory of 1248	2956	setup.exe	8
PID 2956 wrote to memory of 1248	2956	setup.exe	8
PID 2956 wrote to memory of 1248	2956	setup.exe	8

memory/1248-16-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/1248-20-0x000000007EFD0000-0x000000007EFD1000-memory.dmp

Filesize
4KB

Download
memory/2956-12-0x0000000000400000-0x0000000000408960-memory.dmp

Filesize
34KB

Download
memory/2956-8-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2956-10-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2956-13-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2956-2-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2956-15-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2956-6-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2956-17-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/2956-4-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2956-29-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2956-30-0x0000000000400000-0x0000000000408960-memory.dmp

Filesize
34KB

Download