02a29d49a2c5c9759bc2c98b2bc782c641f002c7b26fff35e247acbe4b7a244c

Analysis

max time kernel
162s
max time network
176s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
04/01/2024, 01:08

Target

3f8375d365a92a2241855a5027e8e7c1.exe
Size

282KB
MD5

3f8375d365a92a2241855a5027e8e7c1
SHA1

63b8238cb0d22ce37f85fb6b8b7648e4a29c65a9
SHA256

02a29d49a2c5c9759bc2c98b2bc782c641f002c7b26fff35e247acbe4b7a244c
SHA512

e91c6312b279b533283b972ee8d77fb8f9357f1a12b57d90d5a3fa2d3ea84690c359c1f0965417a97c9a075b48f855b5722a86a760943c6e49de4632a478fbad
SSDEEP

6144:ozppykBHHZ1ILn3/fqpeq6u/tv6tB6vdu8xIKLazQ:ozyQ1ILPfi0ud4B6vduCIKLa8

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 3040 set thread context of 464	3040	3f8375d365a92a2241855a5027e8e7c1.exe	109

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	3040	3f8375d365a92a2241855a5027e8e7c1.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 3040 wrote to memory of 464	3040	3f8375d365a92a2241855a5027e8e7c1.exe	109
PID 3040 wrote to memory of 464	3040	3f8375d365a92a2241855a5027e8e7c1.exe	109
PID 3040 wrote to memory of 464	3040	3f8375d365a92a2241855a5027e8e7c1.exe	109
PID 3040 wrote to memory of 464	3040	3f8375d365a92a2241855a5027e8e7c1.exe	109

C:\Users\Admin\AppData\Local\Temp\3f8375d365a92a2241855a5027e8e7c1.exe
"C:\Users\Admin\AppData\Local\Temp\3f8375d365a92a2241855a5027e8e7c1.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:3040
- C:\Users\Admin\AppData\Local\Temp\3f8375d365a92a2241855a5027e8e7c1.exe
  C:\Users\Admin\AppData\Local\Temp\3f8375d365a92a2241855a5027e8e7c1.exe
  2⤵
  PID:464

memory/3040-0-0x0000000075430000-0x00000000759E1000-memory.dmp

Filesize
5.7MB

Download
memory/3040-1-0x0000000075430000-0x00000000759E1000-memory.dmp

Filesize
5.7MB

Download
memory/3040-2-0x00000000018C0000-0x00000000018D0000-memory.dmp

Filesize
64KB

Download
memory/3040-3-0x0000000075430000-0x00000000759E1000-memory.dmp

Filesize
5.7MB

Download
memory/3040-4-0x00000000018C0000-0x00000000018D0000-memory.dmp

Filesize
64KB

Download