6c756d18d3cfc0b8fb1c5650f350b52959e2187f4e91a848971c89a6c372b191

Analysis

max time kernel
151s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
30/12/2023, 23:14

Target

1fa522eace69c777ee992e6dbb265f12.exe
Size

30KB
MD5

1fa522eace69c777ee992e6dbb265f12
SHA1

2a21b85817d6b17e9fe44dfbe030fafee7c99351
SHA256

6c756d18d3cfc0b8fb1c5650f350b52959e2187f4e91a848971c89a6c372b191
SHA512

424e0d6f4eada73f2d6ee06f8570d0ca61a45ea066fad6bfca0d221e865376c5027bde7cc555590cc8eaadabf6433738fe0f416f9f1bb80ba675f10e9f27310d
SSDEEP

384:7Q1j7OgtcZh6PPaxdvkXOFa3m2K0475vlNryU6EiU74biwj:0t7Ovk4dviFGNnrIzUDwj

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1824 set thread context of 1988	1824	1fa522eace69c777ee992e6dbb265f12.exe	44

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1824	1fa522eace69c777ee992e6dbb265f12.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 1824 wrote to memory of 1988	1824	1fa522eace69c777ee992e6dbb265f12.exe	44
PID 1824 wrote to memory of 1988	1824	1fa522eace69c777ee992e6dbb265f12.exe	44
PID 1824 wrote to memory of 1988	1824	1fa522eace69c777ee992e6dbb265f12.exe	44
PID 1824 wrote to memory of 1988	1824	1fa522eace69c777ee992e6dbb265f12.exe	44
PID 1824 wrote to memory of 1988	1824	1fa522eace69c777ee992e6dbb265f12.exe	44
PID 1824 wrote to memory of 1988	1824	1fa522eace69c777ee992e6dbb265f12.exe	44
PID 1824 wrote to memory of 1988	1824	1fa522eace69c777ee992e6dbb265f12.exe	44

C:\Users\Admin\AppData\Local\Temp\1fa522eace69c777ee992e6dbb265f12.exe
"C:\Users\Admin\AppData\Local\Temp\1fa522eace69c777ee992e6dbb265f12.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1824
- C:\Users\Admin\AppData\Local\Temp\1fa522eace69c777ee992e6dbb265f12.exe
  C:\Users\Admin\AppData\Local\Temp\1fa522eace69c777ee992e6dbb265f12.exe
  2⤵
  PID:1988

memory/1988-2-0x0000000000400000-0x0000000000402000-memory.dmp

Filesize
8KB

Download
memory/1988-4-0x0000000000400000-0x0000000000402000-memory.dmp

Filesize
8KB

Download
memory/1988-5-0x0000000000400000-0x00000000004016E1-memory.dmp

Filesize
5KB

Download