7172bce805d84dbb63df65d1e6b3898de12db711b78257ff9d35bb9910502d3b

Analysis

max time kernel
150s
max time network
154s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30-12-2023 21:17

Target

1cb85e54863baf59130747f401306bbe.exe
Size

100KB
MD5

1cb85e54863baf59130747f401306bbe
SHA1

803b15374b64b86b91ebc59d5fd748ca7117bddc
SHA256

7172bce805d84dbb63df65d1e6b3898de12db711b78257ff9d35bb9910502d3b
SHA512

e6c1c46452f22af18f077db91dd22b273488fb5a9af89b94386e956d534eeb2b87709b721e8ee5b80b2ba3da6f5d58fff147471b0802c484fbd09a85e79aaeb0
SSDEEP

1536:g+U9n4YQHpXcivkAwLok3BE0c7yFHZkxW6z3pNXjwqw+g+9:g/9n4YQHlcCkh3qZ7yhGI6LpNXj8X+9

Score

1^/10

Kills process with taskkill 3 IoCs

evasion

Suspicious use of AdjustPrivilegeToken 3 IoCs

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3036	1cb85e54863baf59130747f401306bbe.exe

Suspicious use of WriteProcessMemory 12 IoCs

description	pid	Process	procid_target
PID 3036 wrote to memory of 572	3036	1cb85e54863baf59130747f401306bbe.exe	33
PID 3036 wrote to memory of 572	3036	1cb85e54863baf59130747f401306bbe.exe	33
PID 3036 wrote to memory of 572	3036	1cb85e54863baf59130747f401306bbe.exe	33
PID 3036 wrote to memory of 572	3036	1cb85e54863baf59130747f401306bbe.exe	33
PID 3036 wrote to memory of 2420	3036	1cb85e54863baf59130747f401306bbe.exe	38
PID 3036 wrote to memory of 2420	3036	1cb85e54863baf59130747f401306bbe.exe	38
PID 3036 wrote to memory of 2420	3036	1cb85e54863baf59130747f401306bbe.exe	38
PID 3036 wrote to memory of 2420	3036	1cb85e54863baf59130747f401306bbe.exe	38
PID 3036 wrote to memory of 2340	3036	1cb85e54863baf59130747f401306bbe.exe	41
PID 3036 wrote to memory of 2340	3036	1cb85e54863baf59130747f401306bbe.exe	41
PID 3036 wrote to memory of 2340	3036	1cb85e54863baf59130747f401306bbe.exe	41
PID 3036 wrote to memory of 2340	3036	1cb85e54863baf59130747f401306bbe.exe	41