63fc4300f17bc4a60f466d98be6de2b9b172244e8894739bd845553aae83693e

Analysis

max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
28/12/2023, 21:23

Target

f90ddead98edafbca6ad4fd8a51a9c3c.exe
Size

73KB
MD5

f90ddead98edafbca6ad4fd8a51a9c3c
SHA1

e277a118d1c7f8d0dc7d61726a0d8cf3fb27f868
SHA256

63fc4300f17bc4a60f466d98be6de2b9b172244e8894739bd845553aae83693e
SHA512

e64cc98791e8647735e9f1519087f8e34dd9c96bd8e89f4fdd8575d20a8de4f9697849d88ce605cb8e29a6d56fa2051be76ae3b3377d5052782b0cfefefe6ad7
SSDEEP

1536:aQ59peRx7wMZ3rCeta49X56wBwkcdPxe/3UUr6R:a4pwdr3J9X8wBwTPxw+

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 868 set thread context of 2332	868	f90ddead98edafbca6ad4fd8a51a9c3c.exe	31

Suspicious use of SetWindowsHookEx 4 IoCs

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 868 wrote to memory of 2332	868	f90ddead98edafbca6ad4fd8a51a9c3c.exe	31
PID 868 wrote to memory of 2332	868	f90ddead98edafbca6ad4fd8a51a9c3c.exe	31
PID 868 wrote to memory of 2332	868	f90ddead98edafbca6ad4fd8a51a9c3c.exe	31
PID 868 wrote to memory of 2332	868	f90ddead98edafbca6ad4fd8a51a9c3c.exe	31
PID 868 wrote to memory of 2332	868	f90ddead98edafbca6ad4fd8a51a9c3c.exe	31
PID 868 wrote to memory of 2332	868	f90ddead98edafbca6ad4fd8a51a9c3c.exe	31
PID 868 wrote to memory of 2332	868	f90ddead98edafbca6ad4fd8a51a9c3c.exe	31
PID 868 wrote to memory of 2332	868	f90ddead98edafbca6ad4fd8a51a9c3c.exe	31

C:\Users\Admin\AppData\Local\Temp\f90ddead98edafbca6ad4fd8a51a9c3c.exe
"C:\Users\Admin\AppData\Local\Temp\f90ddead98edafbca6ad4fd8a51a9c3c.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:868
- C:\Users\Admin\AppData\Local\Temp\f90ddead98edafbca6ad4fd8a51a9c3c.exe
  2⤵
  - Suspicious use of SetWindowsHookEx
  PID:2332

memory/868-0-0x0000000000400000-0x0000000000437000-memory.dmp

Filesize
220KB

Download
memory/868-7-0x0000000000400000-0x0000000000437000-memory.dmp

Filesize
220KB

Download
memory/2332-10-0x0000000000400000-0x0000000000405000-memory.dmp

Filesize
20KB

Download
memory/2332-6-0x0000000000400000-0x0000000000405000-memory.dmp

Filesize
20KB

Download
memory/2332-4-0x0000000000400000-0x0000000000405000-memory.dmp

Filesize
20KB

Download