d867479fbde2e6ed425ed010f0ceb11ad553e941366f37f40c753e63ee26767e

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 23:03

Target

1f55b3dfd3fd7ae6456f553892baa38c.exe
Size

561KB
MD5

1f55b3dfd3fd7ae6456f553892baa38c
SHA1

d167e5b485c721305d1154da3c2bce9f084d58fc
SHA256

d867479fbde2e6ed425ed010f0ceb11ad553e941366f37f40c753e63ee26767e
SHA512

b64f2daef434af4e20a21f7e580749b04663e2336789a8aaf43b83947df5fb005dd4e32720c38d21fa65ea3290e1d00cbd4f0604b7c77a8ace753687b2363e2f
SSDEEP

12288:VxNgCDDOxJMD80trLF6PejgTDc//////31l+UC/n4:bOC+xJO1NQoWc//////3D3

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2148 set thread context of 1428	2148	1f55b3dfd3fd7ae6456f553892baa38c.exe	28

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2292	1428	WerFault.exe	28

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 2148 wrote to memory of 1428	2148	1f55b3dfd3fd7ae6456f553892baa38c.exe	28
PID 2148 wrote to memory of 1428	2148	1f55b3dfd3fd7ae6456f553892baa38c.exe	28
PID 2148 wrote to memory of 1428	2148	1f55b3dfd3fd7ae6456f553892baa38c.exe	28
PID 2148 wrote to memory of 1428	2148	1f55b3dfd3fd7ae6456f553892baa38c.exe	28
PID 2148 wrote to memory of 1428	2148	1f55b3dfd3fd7ae6456f553892baa38c.exe	28
PID 2148 wrote to memory of 1428	2148	1f55b3dfd3fd7ae6456f553892baa38c.exe	28
PID 1428 wrote to memory of 2292	1428	1f55b3dfd3fd7ae6456f553892baa38c.exe	29
PID 1428 wrote to memory of 2292	1428	1f55b3dfd3fd7ae6456f553892baa38c.exe	29
PID 1428 wrote to memory of 2292	1428	1f55b3dfd3fd7ae6456f553892baa38c.exe	29
PID 1428 wrote to memory of 2292	1428	1f55b3dfd3fd7ae6456f553892baa38c.exe	29

memory/1428-5-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/1428-3-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/1428-1-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/1428-9-0x0000000041230000-0x00000000412AA000-memory.dmp

Filesize
488KB

Download
memory/1428-10-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/2148-7-0x0000000001E00000-0x0000000001E7A000-memory.dmp

Filesize
488KB

Download
memory/2148-0-0x0000000041230000-0x00000000412AA000-memory.dmp

Filesize
488KB

Download
memory/2148-8-0x0000000041230000-0x00000000412AA000-memory.dmp

Filesize
488KB

Download