7bf90ee2355dc9931abf44220c1f462c11c72e5b962e650706dcc8bd28a5a6f8

Analysis

max time kernel
151s
max time network
183s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
04/01/2024, 11:54

Target

40caa536311d1cbade0b198e7eb3df1b.exe
Size

55KB
MD5

40caa536311d1cbade0b198e7eb3df1b
SHA1

4fa4e88574d1f7a628aa961c04a4421e17a0b27e
SHA256

7bf90ee2355dc9931abf44220c1f462c11c72e5b962e650706dcc8bd28a5a6f8
SHA512

0be10d648dd313318fb7d83a8a92bae01b88616244836ab35198dea4dcce417123e38962dfc57a36db1f1f0fc37ca763f5177396fad7630c91f06ef8723d91f9
SSDEEP

1536:vpBAyzAyzAyzAy3lB6lz9D0RlvE4Gy4tW45:vqzD0LvSy4tWI

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1972 set thread context of 3580	1972	40caa536311d1cbade0b198e7eb3df1b.exe	94

Suspicious behavior: EnumeratesProcesses 4 IoCs

Suspicious use of WriteProcessMemory 9 IoCs

description	pid	Process	procid_target
PID 1972 wrote to memory of 3580	1972	40caa536311d1cbade0b198e7eb3df1b.exe	94
PID 1972 wrote to memory of 3580	1972	40caa536311d1cbade0b198e7eb3df1b.exe	94
PID 1972 wrote to memory of 3580	1972	40caa536311d1cbade0b198e7eb3df1b.exe	94
PID 1972 wrote to memory of 3580	1972	40caa536311d1cbade0b198e7eb3df1b.exe	94
PID 1972 wrote to memory of 3580	1972	40caa536311d1cbade0b198e7eb3df1b.exe	94
PID 3580 wrote to memory of 3512	3580	40caa536311d1cbade0b198e7eb3df1b.exe	28
PID 3580 wrote to memory of 3512	3580	40caa536311d1cbade0b198e7eb3df1b.exe	28
PID 3580 wrote to memory of 3512	3580	40caa536311d1cbade0b198e7eb3df1b.exe	28
PID 3580 wrote to memory of 3512	3580	40caa536311d1cbade0b198e7eb3df1b.exe	28

memory/3512-6-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/3512-7-0x000000007FFD0000-0x000000007FFD1000-memory.dmp

Filesize
4KB

Download
memory/3580-0-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3580-1-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3580-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3580-4-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/3580-11-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download