6ebfaa1db9732828d6548d815f254e9ce6b2eff1b42291c94e8e17e1abb232a3

Analysis

max time kernel
141s
max time network
120s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 00:15

Target

45a90bfd9b0d01459f1ea7aee65f4fb0.exe
Size

195KB
MD5

45a90bfd9b0d01459f1ea7aee65f4fb0
SHA1

2e97671e83c4a58441aae8ec10c10180b7ab3503
SHA256

6ebfaa1db9732828d6548d815f254e9ce6b2eff1b42291c94e8e17e1abb232a3
SHA512

9bdfd3bc904f4c9256337ee60fe8eb49aed40e5c9501fa5fb523de473a0ebda98cb63db17deb557787117735e99ed9a6e4dc2f6b05a46602342c7a326c19f054
SSDEEP

6144:CV5ZLbIIuHhS8EPtkn42rNaeivH9tJmfx6P:q5NlWRQtAjFKrey

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1716 set thread context of 1172	1716	45a90bfd9b0d01459f1ea7aee65f4fb0.exe	28

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2724	1172	WerFault.exe	28

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1716	45a90bfd9b0d01459f1ea7aee65f4fb0.exe

Suspicious use of WriteProcessMemory 14 IoCs

description	pid	Process	procid_target
PID 1716 wrote to memory of 1172	1716	45a90bfd9b0d01459f1ea7aee65f4fb0.exe	28
PID 1716 wrote to memory of 1172	1716	45a90bfd9b0d01459f1ea7aee65f4fb0.exe	28
PID 1716 wrote to memory of 1172	1716	45a90bfd9b0d01459f1ea7aee65f4fb0.exe	28
PID 1716 wrote to memory of 1172	1716	45a90bfd9b0d01459f1ea7aee65f4fb0.exe	28
PID 1716 wrote to memory of 1172	1716	45a90bfd9b0d01459f1ea7aee65f4fb0.exe	28
PID 1716 wrote to memory of 1172	1716	45a90bfd9b0d01459f1ea7aee65f4fb0.exe	28
PID 1716 wrote to memory of 1172	1716	45a90bfd9b0d01459f1ea7aee65f4fb0.exe	28
PID 1716 wrote to memory of 1172	1716	45a90bfd9b0d01459f1ea7aee65f4fb0.exe	28
PID 1716 wrote to memory of 1172	1716	45a90bfd9b0d01459f1ea7aee65f4fb0.exe	28
PID 1716 wrote to memory of 1172	1716	45a90bfd9b0d01459f1ea7aee65f4fb0.exe	28
PID 1172 wrote to memory of 2724	1172	45a90bfd9b0d01459f1ea7aee65f4fb0.exe	29
PID 1172 wrote to memory of 2724	1172	45a90bfd9b0d01459f1ea7aee65f4fb0.exe	29
PID 1172 wrote to memory of 2724	1172	45a90bfd9b0d01459f1ea7aee65f4fb0.exe	29
PID 1172 wrote to memory of 2724	1172	45a90bfd9b0d01459f1ea7aee65f4fb0.exe	29

memory/1172-2-0x0000000000400000-0x00000000004FD000-memory.dmp

Filesize
1012KB

Download
memory/1172-4-0x0000000000400000-0x00000000004FD000-memory.dmp

Filesize
1012KB

Download
memory/1172-6-0x0000000000400000-0x00000000004FD000-memory.dmp

Filesize
1012KB

Download
memory/1172-8-0x0000000000400000-0x00000000004FD000-memory.dmp

Filesize
1012KB

Download
memory/1172-10-0x0000000000400000-0x00000000004FD000-memory.dmp

Filesize
1012KB

Download
memory/1172-11-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/1172-16-0x0000000000400000-0x00000000004FD000-memory.dmp

Filesize
1012KB

Download
memory/1172-15-0x0000000000400000-0x00000000004FD000-memory.dmp

Filesize
1012KB

Download
memory/1172-13-0x0000000000400000-0x00000000004FD000-memory.dmp

Filesize
1012KB

Download
memory/1172-17-0x0000000000400000-0x00000000004FD000-memory.dmp

Filesize
1012KB

Download