ac5f0098b9a8fb766459939fb1c32e4b6cdae80bce6646ef80bc1af87152069c

Analysis

max time kernel
89s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
26/12/2023, 10:39

Target

67f2ae85c594fae4c085775569008936.exe
Size

38KB
MD5

67f2ae85c594fae4c085775569008936
SHA1

3f0bfe90786946f04a776726eabff918b8efc880
SHA256

ac5f0098b9a8fb766459939fb1c32e4b6cdae80bce6646ef80bc1af87152069c
SHA512

8772761675b952a992a107ef90248762ab522f977edc062a67b4bf743e0c33e7f8d57d46825568a3b5eee11d93f31abb35855d3242c48404e844792618fc033c
SSDEEP

768:EshyiFXd7r8VsZcJbOsvmYwPvvxOsRVBmyK:EU7vOsmbOsv43vxFRTmp

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 4480 set thread context of 4112	4480	67f2ae85c594fae4c085775569008936.exe	89

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4112	67f2ae85c594fae4c085775569008936.exe
4112	67f2ae85c594fae4c085775569008936.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	4112	67f2ae85c594fae4c085775569008936.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4480	67f2ae85c594fae4c085775569008936.exe

Suspicious use of WriteProcessMemory 18 IoCs

description	pid	Process	procid_target
PID 4480 wrote to memory of 4112	4480	67f2ae85c594fae4c085775569008936.exe	89
PID 4480 wrote to memory of 4112	4480	67f2ae85c594fae4c085775569008936.exe	89
PID 4480 wrote to memory of 4112	4480	67f2ae85c594fae4c085775569008936.exe	89
PID 4480 wrote to memory of 4112	4480	67f2ae85c594fae4c085775569008936.exe	89
PID 4480 wrote to memory of 4112	4480	67f2ae85c594fae4c085775569008936.exe	89
PID 4480 wrote to memory of 4112	4480	67f2ae85c594fae4c085775569008936.exe	89
PID 4480 wrote to memory of 4112	4480	67f2ae85c594fae4c085775569008936.exe	89
PID 4112 wrote to memory of 2640	4112	67f2ae85c594fae4c085775569008936.exe	42
PID 4112 wrote to memory of 2640	4112	67f2ae85c594fae4c085775569008936.exe	42
PID 4112 wrote to memory of 2640	4112	67f2ae85c594fae4c085775569008936.exe	42
PID 4112 wrote to memory of 2640	4112	67f2ae85c594fae4c085775569008936.exe	42
PID 4112 wrote to memory of 2640	4112	67f2ae85c594fae4c085775569008936.exe	42
PID 4112 wrote to memory of 2640	4112	67f2ae85c594fae4c085775569008936.exe	42
PID 4112 wrote to memory of 2640	4112	67f2ae85c594fae4c085775569008936.exe	42
PID 4112 wrote to memory of 2640	4112	67f2ae85c594fae4c085775569008936.exe	42
PID 4112 wrote to memory of 2640	4112	67f2ae85c594fae4c085775569008936.exe	42
PID 4112 wrote to memory of 2640	4112	67f2ae85c594fae4c085775569008936.exe	42
PID 4112 wrote to memory of 2640	4112	67f2ae85c594fae4c085775569008936.exe	42

memory/4112-6-0x0000000000400000-0x0000000000404000-memory.dmp

Filesize
16KB

Download
memory/4112-7-0x0000000000400000-0x0000000000404000-memory.dmp

Filesize
16KB

Download
memory/4112-4-0x0000000000400000-0x0000000000404000-memory.dmp

Filesize
16KB

Download
memory/4112-2-0x0000000000400000-0x0000000000404000-memory.dmp

Filesize
16KB

Download
memory/4480-5-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download