79e58125575f22f1ac308706256ccbc097f4dffb195a8a043f486c5591e71d63

Analysis

max time kernel
119s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 15:47 UTC

Target

7a07c03fe7ffc9a5b6271b50ffff7a0d.exe
Size

57KB
MD5

7a07c03fe7ffc9a5b6271b50ffff7a0d
SHA1

7d1c8c668f0a5dc8c1ae27f82d3f2f5e24a1c83b
SHA256

79e58125575f22f1ac308706256ccbc097f4dffb195a8a043f486c5591e71d63
SHA512

47b22e05f1817982ce087b4aed486b83b0e2425df5679e22dc709a99bcabde99edad670acca7e0540069371f23fe8602c59e000f173b37f80c50e5f583684c23
SSDEEP

1536:cxYaZ+H31sbydP3zAn97yZ9Wpcp9pfbbcS0GjTY:cxYZibkA2+cJv9U

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2212 set thread context of 2516	2212	7a07c03fe7ffc9a5b6271b50ffff7a0d.exe	28

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2516	7a07c03fe7ffc9a5b6271b50ffff7a0d.exe
2516	7a07c03fe7ffc9a5b6271b50ffff7a0d.exe

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 2212 wrote to memory of 2516	2212	7a07c03fe7ffc9a5b6271b50ffff7a0d.exe	28
PID 2212 wrote to memory of 2516	2212	7a07c03fe7ffc9a5b6271b50ffff7a0d.exe	28
PID 2212 wrote to memory of 2516	2212	7a07c03fe7ffc9a5b6271b50ffff7a0d.exe	28
PID 2212 wrote to memory of 2516	2212	7a07c03fe7ffc9a5b6271b50ffff7a0d.exe	28
PID 2212 wrote to memory of 2516	2212	7a07c03fe7ffc9a5b6271b50ffff7a0d.exe	28
PID 2212 wrote to memory of 2516	2212	7a07c03fe7ffc9a5b6271b50ffff7a0d.exe	28
PID 2516 wrote to memory of 1196	2516	7a07c03fe7ffc9a5b6271b50ffff7a0d.exe	20
PID 2516 wrote to memory of 1196	2516	7a07c03fe7ffc9a5b6271b50ffff7a0d.exe	20
PID 2516 wrote to memory of 1196	2516	7a07c03fe7ffc9a5b6271b50ffff7a0d.exe	20
PID 2516 wrote to memory of 1196	2516	7a07c03fe7ffc9a5b6271b50ffff7a0d.exe	20

memory/1196-4-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/1196-7-0x000000007EFD0000-0x000000007EFD1000-memory.dmp

Filesize
4KB

Download
memory/2516-0-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2516-2-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2516-3-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/2516-16-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2516-17-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download