67be6b96f6c8ecddfa93025158b661384968b37bdd2bc59b4da1639543d81145

Analysis

max time kernel
118s
max time network
120s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
31-12-2023 12:44

Target

36936bc089bb7efa8f96c84ecda811db.exe
Size

40KB
MD5

36936bc089bb7efa8f96c84ecda811db
SHA1

de7efd50828f6376fbf9210bda790df2229f53e0
SHA256

67be6b96f6c8ecddfa93025158b661384968b37bdd2bc59b4da1639543d81145
SHA512

5ce0795a052959b4a7922523ab97cd553f68f6e242cf8210cadba2e1ff4c6107e193718f65e8a50d5e2968182c5fefc096c3c515ca0be396dfcf165347de8951
SSDEEP

768:MNtr3+zGdMx5Zdj3nr5dqgabJ9Kv0lHYkclfn:c+YMx5Zd3NA3t4v0CP/

Score

7^/10

Deletes itself 1 IoCs

pid	Process
3060	cmd.exe

Drops file in System32 directory 1 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\Deleteme.bat	36936bc089bb7efa8f96c84ecda811db.exe

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2216 set thread context of 2208	2216	36936bc089bb7efa8f96c84ecda811db.exe	16

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 2216 wrote to memory of 2208	2216	36936bc089bb7efa8f96c84ecda811db.exe	16
PID 2216 wrote to memory of 2208	2216	36936bc089bb7efa8f96c84ecda811db.exe	16
PID 2216 wrote to memory of 2208	2216	36936bc089bb7efa8f96c84ecda811db.exe	16
PID 2216 wrote to memory of 2208	2216	36936bc089bb7efa8f96c84ecda811db.exe	16
PID 2216 wrote to memory of 2208	2216	36936bc089bb7efa8f96c84ecda811db.exe	16
PID 2216 wrote to memory of 2208	2216	36936bc089bb7efa8f96c84ecda811db.exe	16
PID 2216 wrote to memory of 3060	2216	36936bc089bb7efa8f96c84ecda811db.exe	18
PID 2216 wrote to memory of 3060	2216	36936bc089bb7efa8f96c84ecda811db.exe	18
PID 2216 wrote to memory of 3060	2216	36936bc089bb7efa8f96c84ecda811db.exe	18
PID 2216 wrote to memory of 3060	2216	36936bc089bb7efa8f96c84ecda811db.exe	18

C:\Windows\SysWOW64\cmd.exe
cmd /c C:\Windows\system32\Deleteme.bat
1⤵
- Deletes itself
PID:3060

memory/2208-5-0x0000000000400000-0x0000000000413000-memory.dmp

Filesize
76KB

Download
memory/2208-3-0x0000000000400000-0x0000000000413000-memory.dmp

Filesize
76KB

Download
memory/2208-1-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2216-14-0x0000000000400000-0x0000000000413000-memory.dmp

Filesize
76KB

Download
memory/2216-0-0x0000000000400000-0x0000000000413000-memory.dmp

Filesize
76KB

Download