42f93b69de546676814bce6ccf337b379e2c2942d0560a2e8f60f3a25a1cfef1

Analysis

max time kernel
150s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
30/12/2023, 13:21

Target

19d259f7a25f2487d4161eb70f7fa8be.exe
Size

204KB
MD5

19d259f7a25f2487d4161eb70f7fa8be
SHA1

c59c48e4376342007f558bf1bc00f8d6a0a4f5f2
SHA256

42f93b69de546676814bce6ccf337b379e2c2942d0560a2e8f60f3a25a1cfef1
SHA512

3f4746f1df7f3d48544c6a1eee15f2a194d17578b335ad108297dbcc2e8f686da64c2a2a4ad8a9ff6ff93a5d6603fd6ed40dff2d3f5a0d2154e27e945b306d9d
SSDEEP

6144:ugP7FaPhWr97ASvBSoxTqTNn136MMo3WpidPf6AIIN7:ugjFihkhA6qZ13hHs8nnr7

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 4640 set thread context of 1620	4640	19d259f7a25f2487d4161eb70f7fa8be.exe	90

Suspicious behavior: EnumeratesProcesses 4 IoCs

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4640	19d259f7a25f2487d4161eb70f7fa8be.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 4640 wrote to memory of 1620	4640	19d259f7a25f2487d4161eb70f7fa8be.exe	90
PID 4640 wrote to memory of 1620	4640	19d259f7a25f2487d4161eb70f7fa8be.exe	90
PID 4640 wrote to memory of 1620	4640	19d259f7a25f2487d4161eb70f7fa8be.exe	90
PID 4640 wrote to memory of 1620	4640	19d259f7a25f2487d4161eb70f7fa8be.exe	90
PID 4640 wrote to memory of 1620	4640	19d259f7a25f2487d4161eb70f7fa8be.exe	90
PID 4640 wrote to memory of 1620	4640	19d259f7a25f2487d4161eb70f7fa8be.exe	90
PID 4640 wrote to memory of 1620	4640	19d259f7a25f2487d4161eb70f7fa8be.exe	90
PID 1620 wrote to memory of 3412	1620	19d259f7a25f2487d4161eb70f7fa8be.exe	44
PID 1620 wrote to memory of 3412	1620	19d259f7a25f2487d4161eb70f7fa8be.exe	44
PID 1620 wrote to memory of 3412	1620	19d259f7a25f2487d4161eb70f7fa8be.exe	44
PID 1620 wrote to memory of 3412	1620	19d259f7a25f2487d4161eb70f7fa8be.exe	44

memory/1620-9-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1620-4-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1620-6-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1620-8-0x0000000000400000-0x0000000000408960-memory.dmp

Filesize
34KB

Download
memory/1620-10-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/1620-15-0x0000000000410000-0x00000000004D9000-memory.dmp

Filesize
804KB

Download
memory/1620-16-0x0000000000400000-0x0000000000408960-memory.dmp

Filesize
34KB

Download
memory/1620-17-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/3412-11-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/3412-12-0x000000007FFD0000-0x000000007FFD1000-memory.dmp

Filesize
4KB

Download
memory/4640-1-0x0000000000400000-0x00000000004CE000-memory.dmp

Filesize
824KB

Download
memory/4640-7-0x0000000000400000-0x00000000004CE000-memory.dmp

Filesize
824KB

Download
memory/4640-0-0x0000000000400000-0x00000000004CE000-memory.dmp

Filesize
824KB

Download