334c8cfab8f1c01eb52da8a4a30f86b107e1bc73ad440d38aecce3d0d35e98d4

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 12:14

Target

1833bd905c114e98dcd548502017d342.exe
Size

24KB
MD5

1833bd905c114e98dcd548502017d342
SHA1

a4550578dbadd7da0710289e98f366d1e2660fd1
SHA256

334c8cfab8f1c01eb52da8a4a30f86b107e1bc73ad440d38aecce3d0d35e98d4
SHA512

6c190c9193295e099aca7352a674acb59b3526690537313c20800771ec3e082c8c940a55138671d68bd9acef157b7035cccb58c4da7193f50f697c462831c8cf
SSDEEP

384:drDdVolicdCfTIYHDKKdBDEy5zCD5aocM6pvG7wg+94Kh84aXs:drDYliZ5jKKd2VYoOvAKNac

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2424 set thread context of 2244	2424	1833bd905c114e98dcd548502017d342.exe	28

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 2424 wrote to memory of 2244	2424	1833bd905c114e98dcd548502017d342.exe	28
PID 2424 wrote to memory of 2244	2424	1833bd905c114e98dcd548502017d342.exe	28
PID 2424 wrote to memory of 2244	2424	1833bd905c114e98dcd548502017d342.exe	28
PID 2424 wrote to memory of 2244	2424	1833bd905c114e98dcd548502017d342.exe	28
PID 2424 wrote to memory of 2244	2424	1833bd905c114e98dcd548502017d342.exe	28
PID 2424 wrote to memory of 2244	2424	1833bd905c114e98dcd548502017d342.exe	28
PID 2424 wrote to memory of 2244	2424	1833bd905c114e98dcd548502017d342.exe	28
PID 2424 wrote to memory of 2244	2424	1833bd905c114e98dcd548502017d342.exe	28

C:\Users\Admin\AppData\Local\Temp\1833bd905c114e98dcd548502017d342.exe
"C:\Users\Admin\AppData\Local\Temp\1833bd905c114e98dcd548502017d342.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:2424
- C:\Users\Admin\AppData\Local\Temp\1833bd905c114e98dcd548502017d342.exe
  "C:\Users\Admin\AppData\Local\Temp\1833bd905c114e98dcd548502017d342.exe"
  2⤵
  PID:2244

memory/2244-8-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2244-7-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/2244-6-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/2244-4-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/2244-2-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/2424-0-0x0000000012300000-0x000000001230B000-memory.dmp

Filesize
44KB

Download
memory/2424-1-0x0000000012300000-0x000000001230B000-memory.dmp

Filesize
44KB

Download
memory/2424-11-0x0000000012300000-0x000000001230B000-memory.dmp

Filesize
44KB

Download