4299d2fa191199728c2ad5bb33447a16d674f378d87d88674ce2a941dbbb6471

Analysis

max time kernel
150s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
31/12/2023, 01:51

Target

23671a94e7a84481bc9e641574f12baf.exe
Size

40KB
MD5

23671a94e7a84481bc9e641574f12baf
SHA1

e16de615cc0210b3b0b7c20a80b26e212e638a11
SHA256

4299d2fa191199728c2ad5bb33447a16d674f378d87d88674ce2a941dbbb6471
SHA512

81c1694ac1708c1ba2b9d08b6736248fe9a3f0d8aec13ff5946c1db8666d4e106b5d7b6082ffd42f41e29e399984bb7bf9b3e644e9411a9df218c94ef4f6f4bc
SSDEEP

384:+bJwLMO4BncfQVIw5qpuUib7Go/gkZlWGlVgrjvt2VY:qOAcflp/iPGo/g8lWGUfl

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1864 set thread context of 1128	1864	23671a94e7a84481bc9e641574f12baf.exe	25

Program crash 1 IoCs

pid	pid_target	Process	procid_target
780	1128	WerFault.exe	25

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1864	23671a94e7a84481bc9e641574f12baf.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 1864 wrote to memory of 1128	1864	23671a94e7a84481bc9e641574f12baf.exe	25
PID 1864 wrote to memory of 1128	1864	23671a94e7a84481bc9e641574f12baf.exe	25
PID 1864 wrote to memory of 1128	1864	23671a94e7a84481bc9e641574f12baf.exe	25
PID 1864 wrote to memory of 1128	1864	23671a94e7a84481bc9e641574f12baf.exe	25
PID 1864 wrote to memory of 1128	1864	23671a94e7a84481bc9e641574f12baf.exe	25
PID 1864 wrote to memory of 1128	1864	23671a94e7a84481bc9e641574f12baf.exe	25
PID 1864 wrote to memory of 1128	1864	23671a94e7a84481bc9e641574f12baf.exe	25

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 1128 -ip 1128
1⤵
PID:4364

memory/1128-5-0x0000000000400000-0x0000000000402000-memory.dmp

Filesize
8KB

Download
memory/1128-3-0x0000000000400000-0x0000000000402000-memory.dmp

Filesize
8KB

Download