52fa03da2fb5711343f574f7ed58919cf1f5e26fa6202270f53c24d51fa972e6

Analysis

max time kernel
144s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25/12/2023, 21:04

Target

3cb07690da1fa8d19b69afc3a7dc9f88.exe
Size

300KB
MD5

3cb07690da1fa8d19b69afc3a7dc9f88
SHA1

76a78e05eec63a8d8ec61e7163da8b9885fd6011
SHA256

52fa03da2fb5711343f574f7ed58919cf1f5e26fa6202270f53c24d51fa972e6
SHA512

f5be94c98f15e7fe3fa6b4cf62bf0979f38e0ee2f8fe7b9c58c4efd2a821cde0a46a98bb8aab43768e15effc60085e3c024dfc97597bf3f704729d29ee22ad1a
SSDEEP

3072:JaoF3CkEnm23lSuURxK/paQFVCIyxZtIbLPISKaTMjD2B9r3nWGtot+OO2ETG/8z:nYbd

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 4636 set thread context of 2480	4636	3cb07690da1fa8d19b69afc3a7dc9f88.exe	88

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4636	3cb07690da1fa8d19b69afc3a7dc9f88.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 4636 wrote to memory of 2480	4636	3cb07690da1fa8d19b69afc3a7dc9f88.exe	88
PID 4636 wrote to memory of 2480	4636	3cb07690da1fa8d19b69afc3a7dc9f88.exe	88
PID 4636 wrote to memory of 2480	4636	3cb07690da1fa8d19b69afc3a7dc9f88.exe	88
PID 4636 wrote to memory of 2480	4636	3cb07690da1fa8d19b69afc3a7dc9f88.exe	88
PID 4636 wrote to memory of 2480	4636	3cb07690da1fa8d19b69afc3a7dc9f88.exe	88
PID 4636 wrote to memory of 2480	4636	3cb07690da1fa8d19b69afc3a7dc9f88.exe	88
PID 4636 wrote to memory of 2480	4636	3cb07690da1fa8d19b69afc3a7dc9f88.exe	88

C:\Users\Admin\AppData\Local\Temp\3cb07690da1fa8d19b69afc3a7dc9f88.exe
"C:\Users\Admin\AppData\Local\Temp\3cb07690da1fa8d19b69afc3a7dc9f88.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4636
- C:\Users\Admin\AppData\Local\Temp\3cb07690da1fa8d19b69afc3a7dc9f88.exe
  C:\Users\Admin\AppData\Local\Temp\3cb07690da1fa8d19b69afc3a7dc9f88.exe
  2⤵
  PID:2480

memory/2480-2-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2480-6-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2480-5-0x0000000000400000-0x0000000000408960-memory.dmp

Filesize
34KB

Download
memory/2480-4-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2480-7-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/2480-9-0x0000000000400000-0x0000000000408960-memory.dmp

Filesize
34KB

Download