7b9f4a4000a434d3d2372b30fe9e7885c057d15d837dc909754b618db16426bc

Analysis

max time kernel
151s
max time network
175s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
31-12-2023 07:26

Target

2d5954e7d7801d94b69be67ff56a930c.exe
Size

77KB
MD5

2d5954e7d7801d94b69be67ff56a930c
SHA1

3b6773f19c2880c62f8de92ba3308103af3965af
SHA256

7b9f4a4000a434d3d2372b30fe9e7885c057d15d837dc909754b618db16426bc
SHA512

b1c5b9e5cb4fc1eb2e996b2dd06924595ddf9b1658a0af55532ac542efcf1823e261263cffce5736b4a0c6b5aa71689be90c6e3397460f1fd2b1c5a97f49b9ca
SSDEEP

1536:0Rn0zTofkDpIMHLFqI6xOoWPKDL6miWbK+fn2UOs/:0R0PofkDpIMHRpOO/KYW6q

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 3236 set thread context of 4956	3236	2d5954e7d7801d94b69be67ff56a930c.exe	94

Suspicious use of WriteProcessMemory 12 IoCs

description	pid	Process	procid_target
PID 3236 wrote to memory of 4956	3236	2d5954e7d7801d94b69be67ff56a930c.exe	94
PID 3236 wrote to memory of 4956	3236	2d5954e7d7801d94b69be67ff56a930c.exe	94
PID 3236 wrote to memory of 4956	3236	2d5954e7d7801d94b69be67ff56a930c.exe	94
PID 3236 wrote to memory of 4956	3236	2d5954e7d7801d94b69be67ff56a930c.exe	94
PID 3236 wrote to memory of 4956	3236	2d5954e7d7801d94b69be67ff56a930c.exe	94
PID 3236 wrote to memory of 4956	3236	2d5954e7d7801d94b69be67ff56a930c.exe	94
PID 3236 wrote to memory of 4956	3236	2d5954e7d7801d94b69be67ff56a930c.exe	94
PID 3236 wrote to memory of 4956	3236	2d5954e7d7801d94b69be67ff56a930c.exe	94
PID 3236 wrote to memory of 4956	3236	2d5954e7d7801d94b69be67ff56a930c.exe	94
PID 3236 wrote to memory of 4956	3236	2d5954e7d7801d94b69be67ff56a930c.exe	94
PID 4956 wrote to memory of 3520	4956	2d5954e7d7801d94b69be67ff56a930c.exe	20
PID 4956 wrote to memory of 3520	4956	2d5954e7d7801d94b69be67ff56a930c.exe	20

memory/3236-0-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/3236-10-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/4956-2-0x0000000000400000-0x0000000000416000-memory.dmp

Filesize
88KB

Download
memory/4956-3-0x0000000000400000-0x0000000000416000-memory.dmp

Filesize
88KB

Download
memory/4956-4-0x0000000000400000-0x0000000000416000-memory.dmp

Filesize
88KB

Download
memory/4956-5-0x0000000000400000-0x0000000000416000-memory.dmp

Filesize
88KB

Download
memory/4956-7-0x0000000000400000-0x0000000000416000-memory.dmp

Filesize
88KB

Download
memory/4956-8-0x0000000000400000-0x0000000000416000-memory.dmp

Filesize
88KB

Download