8f7c7f7a9d3ace0864a43d4b37b64d8c00ba8d8c912e2a4aebc73d8fc136e89d

Analysis

max time kernel
162s
max time network
159s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
26/12/2023, 15:07

Target

77e2f53fb7be50c23483fdbfd18a597e.exe
Size

144KB
MD5

77e2f53fb7be50c23483fdbfd18a597e
SHA1

ba0778470916b0b4a65b042d8c8826e290e37548
SHA256

8f7c7f7a9d3ace0864a43d4b37b64d8c00ba8d8c912e2a4aebc73d8fc136e89d
SHA512

ee6c5dd0841e78527b2c5da3ceda7e3771cc3ef92e20c74580d5bf268545625a7685a5a2f2cffab35e5b94bc1431bb4fce9b54626d4d6087885b295650063217
SSDEEP

3072:YDetRVbU3JoJg+I1e2kpKKZi5e8oiePs1vkR9eovFXS/Fez+EBAufQ49v4Fe:YDetu6Jg+b9j5Pyx/YJBkqQE

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 3968 set thread context of 2612	3968	77e2f53fb7be50c23483fdbfd18a597e.exe	90

Suspicious behavior: EnumeratesProcesses 4 IoCs

Suspicious use of WriteProcessMemory 9 IoCs

description	pid	Process	procid_target
PID 3968 wrote to memory of 2612	3968	77e2f53fb7be50c23483fdbfd18a597e.exe	90
PID 3968 wrote to memory of 2612	3968	77e2f53fb7be50c23483fdbfd18a597e.exe	90
PID 3968 wrote to memory of 2612	3968	77e2f53fb7be50c23483fdbfd18a597e.exe	90
PID 3968 wrote to memory of 2612	3968	77e2f53fb7be50c23483fdbfd18a597e.exe	90
PID 3968 wrote to memory of 2612	3968	77e2f53fb7be50c23483fdbfd18a597e.exe	90
PID 2612 wrote to memory of 3484	2612	77e2f53fb7be50c23483fdbfd18a597e.exe	43
PID 2612 wrote to memory of 3484	2612	77e2f53fb7be50c23483fdbfd18a597e.exe	43
PID 2612 wrote to memory of 3484	2612	77e2f53fb7be50c23483fdbfd18a597e.exe	43
PID 2612 wrote to memory of 3484	2612	77e2f53fb7be50c23483fdbfd18a597e.exe	43

memory/2612-0-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2612-1-0x0000000000400000-0x00000000004083A0-memory.dmp

Filesize
32KB

Download
memory/2612-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2612-4-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2612-6-0x0000000010000000-0x0000000010012000-memory.dmp

Filesize
72KB

Download
memory/2612-12-0x0000000000410000-0x00000000004D9000-memory.dmp

Filesize
804KB

Download
memory/2612-13-0x0000000000400000-0x00000000004083A0-memory.dmp

Filesize
32KB

Download
memory/2612-14-0x0000000010000000-0x0000000010012000-memory.dmp

Filesize
72KB

Download
memory/3484-8-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/3484-9-0x000000007FFD0000-0x000000007FFD1000-memory.dmp

Filesize
4KB

Download
memory/3968-5-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download