6d36a752fd173ace99588339de67650be53ca8d66c188c7d0adbfa0ea247df60

Analysis

max time kernel
126s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
29/12/2023, 21:37

Target

049a6109636dc13fb00d5a7b4acff768.exe
Size

237KB
MD5

049a6109636dc13fb00d5a7b4acff768
SHA1

bc30704831f00830d7c6cb1fa58eab579b5f64d9
SHA256

6d36a752fd173ace99588339de67650be53ca8d66c188c7d0adbfa0ea247df60
SHA512

585734ccf512c8a79e28f0299f271660f6b17849d64c8ade6456dbf0b7946359fc9331e35a135aeaee2c4f45fc52a26cb83367b29d4651f579cb1c6bfef14463
SSDEEP

6144:H893yqSnc//////8yreuuG/7qA+oak1EY/UzLgrETjK9nz:H23yq2c//////8yreXC5Eo4gk4z

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 3124 set thread context of 4748	3124	049a6109636dc13fb00d5a7b4acff768.exe	15

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 3124 wrote to memory of 4748	3124	049a6109636dc13fb00d5a7b4acff768.exe	15
PID 3124 wrote to memory of 4748	3124	049a6109636dc13fb00d5a7b4acff768.exe	15
PID 3124 wrote to memory of 4748	3124	049a6109636dc13fb00d5a7b4acff768.exe	15
PID 3124 wrote to memory of 4748	3124	049a6109636dc13fb00d5a7b4acff768.exe	15
PID 3124 wrote to memory of 4748	3124	049a6109636dc13fb00d5a7b4acff768.exe	15

C:\Users\Admin\AppData\Local\Temp\049a6109636dc13fb00d5a7b4acff768.exe
"C:\Users\Admin\AppData\Local\Temp\049a6109636dc13fb00d5a7b4acff768.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:3124
- C:\Users\Admin\AppData\Local\Temp\049a6109636dc13fb00d5a7b4acff768.exe
  C:\Users\Admin\AppData\Local\Temp\049a6109636dc13fb00d5a7b4acff768.exe
  2⤵
  PID:4748

memory/3124-0-0x0000000020000000-0x0000000020043000-memory.dmp

Filesize
268KB

Download
memory/3124-2-0x0000000020000000-0x0000000020043000-memory.dmp

Filesize
268KB

Download
memory/4748-5-0x0000000000400000-0x0000000000407000-memory.dmp

Filesize
28KB

Download
memory/4748-4-0x0000000000400000-0x0000000000407000-memory.dmp

Filesize
28KB

Download
memory/4748-1-0x0000000000400000-0x0000000000407000-memory.dmp

Filesize
28KB

Download