4ab697074e9a791aa4c93c15477f7c54b80c9041aa9152260203384d60e0f909

Analysis

max time kernel
147s
max time network
110s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25-12-2023 20:18

Target

3adbef82f723292079ae60173f2d6cf3.exe
Size

273KB
MD5

3adbef82f723292079ae60173f2d6cf3
SHA1

853db39ecdb74c451d52a2b0c65519fdf178226e
SHA256

4ab697074e9a791aa4c93c15477f7c54b80c9041aa9152260203384d60e0f909
SHA512

3bd15068f3d703cbe5a0084811771a8e82a6fd9c386f9c6456bdfda70681524707412534445e96c4849d2b6eb3678891d122068e83c2cbb21a29b3413b62a035
SSDEEP

6144:pvGd72w2Ub4S3l+4OCdyOfRLQ3Z9MUa6:pv0ntZ3lgC0OflQJ

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 3680 set thread context of 216	3680	3adbef82f723292079ae60173f2d6cf3.exe	29

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3680	3adbef82f723292079ae60173f2d6cf3.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 3680 wrote to memory of 216	3680	3adbef82f723292079ae60173f2d6cf3.exe	29
PID 3680 wrote to memory of 216	3680	3adbef82f723292079ae60173f2d6cf3.exe	29
PID 3680 wrote to memory of 216	3680	3adbef82f723292079ae60173f2d6cf3.exe	29
PID 3680 wrote to memory of 216	3680	3adbef82f723292079ae60173f2d6cf3.exe	29
PID 3680 wrote to memory of 216	3680	3adbef82f723292079ae60173f2d6cf3.exe	29
PID 3680 wrote to memory of 216	3680	3adbef82f723292079ae60173f2d6cf3.exe	29
PID 3680 wrote to memory of 216	3680	3adbef82f723292079ae60173f2d6cf3.exe	29

C:\Users\Admin\AppData\Local\Temp\3adbef82f723292079ae60173f2d6cf3.exe
"C:\Users\Admin\AppData\Local\Temp\3adbef82f723292079ae60173f2d6cf3.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3680
- C:\Users\Admin\AppData\Local\Temp\3adbef82f723292079ae60173f2d6cf3.exe
  C:\Users\Admin\AppData\Local\Temp\3adbef82f723292079ae60173f2d6cf3.exe
  2⤵
  PID:216

memory/216-6-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/216-7-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/216-5-0x0000000000400000-0x0000000000408960-memory.dmp

Filesize
34KB

Download
memory/216-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/216-9-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/216-11-0x0000000000400000-0x0000000000408960-memory.dmp

Filesize
34KB

Download
memory/3680-0-0x0000000000400000-0x000000000051E000-memory.dmp

Filesize
1.1MB

Download
memory/3680-8-0x0000000000400000-0x000000000051E000-memory.dmp

Filesize
1.1MB

Download