4ab697074e9a791aa4c93c15477f7c54b80c9041aa9152260203384d60e0f909

Analysis

max time kernel
119s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 19:26

Target

3adbef82f723292079ae60173f2d6cf3.exe
Size

273KB
MD5

3adbef82f723292079ae60173f2d6cf3
SHA1

853db39ecdb74c451d52a2b0c65519fdf178226e
SHA256

4ab697074e9a791aa4c93c15477f7c54b80c9041aa9152260203384d60e0f909
SHA512

3bd15068f3d703cbe5a0084811771a8e82a6fd9c386f9c6456bdfda70681524707412534445e96c4849d2b6eb3678891d122068e83c2cbb21a29b3413b62a035
SSDEEP

6144:pvGd72w2Ub4S3l+4OCdyOfRLQ3Z9MUa6:pv0ntZ3lgC0OflQJ

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2236 set thread context of 2196	2236	3adbef82f723292079ae60173f2d6cf3.exe	28

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2236	3adbef82f723292079ae60173f2d6cf3.exe

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 2236 wrote to memory of 2196	2236	3adbef82f723292079ae60173f2d6cf3.exe	28
PID 2236 wrote to memory of 2196	2236	3adbef82f723292079ae60173f2d6cf3.exe	28
PID 2236 wrote to memory of 2196	2236	3adbef82f723292079ae60173f2d6cf3.exe	28
PID 2236 wrote to memory of 2196	2236	3adbef82f723292079ae60173f2d6cf3.exe	28
PID 2236 wrote to memory of 2196	2236	3adbef82f723292079ae60173f2d6cf3.exe	28
PID 2236 wrote to memory of 2196	2236	3adbef82f723292079ae60173f2d6cf3.exe	28
PID 2236 wrote to memory of 2196	2236	3adbef82f723292079ae60173f2d6cf3.exe	28
PID 2236 wrote to memory of 2196	2236	3adbef82f723292079ae60173f2d6cf3.exe	28

C:\Users\Admin\AppData\Local\Temp\3adbef82f723292079ae60173f2d6cf3.exe
"C:\Users\Admin\AppData\Local\Temp\3adbef82f723292079ae60173f2d6cf3.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2236
- C:\Users\Admin\AppData\Local\Temp\3adbef82f723292079ae60173f2d6cf3.exe
  C:\Users\Admin\AppData\Local\Temp\3adbef82f723292079ae60173f2d6cf3.exe
  2⤵
  PID:2196

memory/2196-9-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2196-7-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2196-6-0x0000000000400000-0x0000000000408960-memory.dmp

Filesize
34KB

Download
memory/2196-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2196-11-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/2196-10-0x0000000000400000-0x0000000000408960-memory.dmp

Filesize
34KB

Download
memory/2236-0-0x0000000000400000-0x000000000051E000-memory.dmp

Filesize
1.1MB

Download
memory/2236-4-0x00000000029A0000-0x0000000002ABE000-memory.dmp

Filesize
1.1MB

Download
memory/2236-8-0x0000000000400000-0x000000000051E000-memory.dmp

Filesize
1.1MB

Download