5160aa598d3ffec4c28ffc4545afaa3473df47a89c34f14f4587e9878dcafc59

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
29/12/2023, 20:50

Target

03a70a3da971a8510a3016498856a98c.exe
Size

40KB
MD5

03a70a3da971a8510a3016498856a98c
SHA1

3858ebbe8eb8ce54276268b2058160863a9210fa
SHA256

5160aa598d3ffec4c28ffc4545afaa3473df47a89c34f14f4587e9878dcafc59
SHA512

912fa45044f1808e7d3ad7f5aa92cf83ffa4512822b7dbf93439e28e5b9c05e2cda2c144da908cf57161328f1d570e2a50bb43172b25525edd59cf740551483b
SSDEEP

768:FioFztnIdMh6UMhaXHT1sFzHMF3N8PJfcZykcBUUd0I/uHoDH2ms2k2:8KxV6QXRiYN8n4Ufnra2k2

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 516 set thread context of 4560	516	03a70a3da971a8510a3016498856a98c.exe	88

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 516 wrote to memory of 4560	516	03a70a3da971a8510a3016498856a98c.exe	88
PID 516 wrote to memory of 4560	516	03a70a3da971a8510a3016498856a98c.exe	88
PID 516 wrote to memory of 4560	516	03a70a3da971a8510a3016498856a98c.exe	88
PID 516 wrote to memory of 4560	516	03a70a3da971a8510a3016498856a98c.exe	88
PID 516 wrote to memory of 4560	516	03a70a3da971a8510a3016498856a98c.exe	88

C:\Users\Admin\AppData\Local\Temp\03a70a3da971a8510a3016498856a98c.exe
"C:\Users\Admin\AppData\Local\Temp\03a70a3da971a8510a3016498856a98c.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:516
- C:\Users\Admin\AppData\Local\Temp\03a70a3da971a8510a3016498856a98c.exe
  C:\Users\Admin\AppData\Local\Temp\03a70a3da971a8510a3016498856a98c.exe
  2⤵
  PID:4560

memory/516-0-0x0000000013140000-0x0000000013153000-memory.dmp

Filesize
76KB

Download
memory/516-1-0x0000000013140000-0x0000000013153000-memory.dmp

Filesize
76KB

Download
memory/516-2-0x00000000001C0000-0x00000000001C1000-memory.dmp

Filesize
4KB

Download
memory/516-3-0x0000000000580000-0x0000000000581000-memory.dmp

Filesize
4KB

Download
memory/516-5-0x0000000000570000-0x0000000000571000-memory.dmp

Filesize
4KB

Download
memory/516-7-0x0000000013140000-0x0000000013153000-memory.dmp

Filesize
76KB

Download
memory/4560-4-0x0000000000400000-0x0000000000427000-memory.dmp

Filesize
156KB

Download
memory/4560-8-0x0000000000400000-0x0000000000427000-memory.dmp

Filesize
156KB

Download
memory/4560-10-0x0000000000400000-0x0000000000427000-memory.dmp

Filesize
156KB

Download