e9486bb906bcc677d7257fbfba79dfbdedc33989e71ced11eb01c1cf388b895b

Analysis

max time kernel
118s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
28/12/2023, 22:14

Target

fc11a7e8c55cec68c15eeffc3e9ee0b9.exe
Size

42KB
MD5

fc11a7e8c55cec68c15eeffc3e9ee0b9
SHA1

cd44691b0c628da032ae499794a7786786b45e2a
SHA256

e9486bb906bcc677d7257fbfba79dfbdedc33989e71ced11eb01c1cf388b895b
SHA512

97692536a31d301c5159788e3ca8afc57f7c7e364b69dcbbad79c2177ac16de48dad872b52886f40ab4d2b9ac7127fd3024fac036392c4c1cf4cb97eceac604d
SSDEEP

768:1NvOKsUmXYz5T5BI1MnSjICagHc8E+yJig7gud6befAStPtYj:1IdYdBAIvgHcl9JigMuNftFg

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2780 set thread context of 2836	2780	fc11a7e8c55cec68c15eeffc3e9ee0b9.exe	28

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2780 wrote to memory of 2836	2780	fc11a7e8c55cec68c15eeffc3e9ee0b9.exe	28
PID 2780 wrote to memory of 2836	2780	fc11a7e8c55cec68c15eeffc3e9ee0b9.exe	28
PID 2780 wrote to memory of 2836	2780	fc11a7e8c55cec68c15eeffc3e9ee0b9.exe	28
PID 2780 wrote to memory of 2836	2780	fc11a7e8c55cec68c15eeffc3e9ee0b9.exe	28
PID 2780 wrote to memory of 2836	2780	fc11a7e8c55cec68c15eeffc3e9ee0b9.exe	28
PID 2780 wrote to memory of 2836	2780	fc11a7e8c55cec68c15eeffc3e9ee0b9.exe	28
PID 2780 wrote to memory of 2836	2780	fc11a7e8c55cec68c15eeffc3e9ee0b9.exe	28

C:\Users\Admin\AppData\Local\Temp\fc11a7e8c55cec68c15eeffc3e9ee0b9.exe
"C:\Users\Admin\AppData\Local\Temp\fc11a7e8c55cec68c15eeffc3e9ee0b9.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:2780
- C:\Users\Admin\AppData\Local\Temp\fc11a7e8c55cec68c15eeffc3e9ee0b9.exe
  C:\Users\Admin\AppData\Local\Temp\fc11a7e8c55cec68c15eeffc3e9ee0b9.exe
  2⤵
  PID:2836

memory/2780-11-0x0000000000350000-0x0000000000360000-memory.dmp

Filesize
64KB

Download
memory/2780-17-0x0000000000350000-0x0000000000360000-memory.dmp

Filesize
64KB

Download
memory/2836-18-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2836-20-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2836-22-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2836-27-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2836-25-0x0000000000400000-0x0000000000408010-memory.dmp

Filesize
32KB

Download
memory/2836-28-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2836-29-0x0000000010000000-0x0000000010012000-memory.dmp

Filesize
72KB

Download
memory/2836-31-0x0000000000400000-0x0000000000408010-memory.dmp

Filesize
32KB

Download