7bf90ee2355dc9931abf44220c1f462c11c72e5b962e650706dcc8bd28a5a6f8

Analysis

max time kernel
120s
max time network
120s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
04/01/2024, 11:54

Target

40caa536311d1cbade0b198e7eb3df1b.exe
Size

55KB
MD5

40caa536311d1cbade0b198e7eb3df1b
SHA1

4fa4e88574d1f7a628aa961c04a4421e17a0b27e
SHA256

7bf90ee2355dc9931abf44220c1f462c11c72e5b962e650706dcc8bd28a5a6f8
SHA512

0be10d648dd313318fb7d83a8a92bae01b88616244836ab35198dea4dcce417123e38962dfc57a36db1f1f0fc37ca763f5177396fad7630c91f06ef8723d91f9
SSDEEP

1536:vpBAyzAyzAyzAy3lB6lz9D0RlvE4Gy4tW45:vqzD0LvSy4tWI

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1364 set thread context of 2264	1364	40caa536311d1cbade0b198e7eb3df1b.exe	28

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2264	40caa536311d1cbade0b198e7eb3df1b.exe
2264	40caa536311d1cbade0b198e7eb3df1b.exe

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 1364 wrote to memory of 2264	1364	40caa536311d1cbade0b198e7eb3df1b.exe	28
PID 1364 wrote to memory of 2264	1364	40caa536311d1cbade0b198e7eb3df1b.exe	28
PID 1364 wrote to memory of 2264	1364	40caa536311d1cbade0b198e7eb3df1b.exe	28
PID 1364 wrote to memory of 2264	1364	40caa536311d1cbade0b198e7eb3df1b.exe	28
PID 1364 wrote to memory of 2264	1364	40caa536311d1cbade0b198e7eb3df1b.exe	28
PID 1364 wrote to memory of 2264	1364	40caa536311d1cbade0b198e7eb3df1b.exe	28
PID 2264 wrote to memory of 1372	2264	40caa536311d1cbade0b198e7eb3df1b.exe	7
PID 2264 wrote to memory of 1372	2264	40caa536311d1cbade0b198e7eb3df1b.exe	7
PID 2264 wrote to memory of 1372	2264	40caa536311d1cbade0b198e7eb3df1b.exe	7
PID 2264 wrote to memory of 1372	2264	40caa536311d1cbade0b198e7eb3df1b.exe	7

memory/1372-3-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/1372-7-0x000000007EFD0000-0x000000007EFD1000-memory.dmp

Filesize
4KB

Download
memory/2264-0-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2264-2-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2264-6-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/2264-16-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download