951adc25ccc2790dd70c660bb0c608ae91da90cd64ca0d87a14588b74b881e0c

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
06/01/2024, 04:15

Target

45417f472613d4c913f77303817b5a90.exe
Size

150KB
MD5

45417f472613d4c913f77303817b5a90
SHA1

56e4dfd7340bd499d5006810ddd5e98f532538cb
SHA256

951adc25ccc2790dd70c660bb0c608ae91da90cd64ca0d87a14588b74b881e0c
SHA512

0f767fb6cc0bff8bcac3ec7d42550f28f6a2e2ad0ff728151e282f10cb709383ed823e9a331044f2a3753acfaaef1b731e34f89498d5a27ddf14a2425b1b43f4
SSDEEP

3072:zK60n2//tmqcTM80SSxGuB7OYwvEcJH9mmt2x3pghN6kGs3Gq:zK6FHt72MjSYBiYwvEc6Q2x3EAs5

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 880 set thread context of 2200	880	45417f472613d4c913f77303817b5a90.exe	17

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2200	45417f472613d4c913f77303817b5a90.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 880 wrote to memory of 2200	880	45417f472613d4c913f77303817b5a90.exe	17
PID 880 wrote to memory of 2200	880	45417f472613d4c913f77303817b5a90.exe	17
PID 880 wrote to memory of 2200	880	45417f472613d4c913f77303817b5a90.exe	17
PID 880 wrote to memory of 2200	880	45417f472613d4c913f77303817b5a90.exe	17
PID 880 wrote to memory of 2200	880	45417f472613d4c913f77303817b5a90.exe	17
PID 880 wrote to memory of 2200	880	45417f472613d4c913f77303817b5a90.exe	17

C:\Users\Admin\AppData\Local\Temp\45417f472613d4c913f77303817b5a90.exe
"C:\Users\Admin\AppData\Local\Temp\45417f472613d4c913f77303817b5a90.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:880
- C:\Users\Admin\AppData\Local\Temp\45417f472613d4c913f77303817b5a90.exe
  C:\Users\Admin\AppData\Local\Temp\45417f472613d4c913f77303817b5a90.exe
  2⤵
  - Suspicious use of SetWindowsHookEx
  PID:2200

memory/880-5-0x0000000032100000-0x0000000032134000-memory.dmp

Filesize
208KB

Download
memory/2200-10-0x0000000000400000-0x0000000000404000-memory.dmp

Filesize
16KB

Download
memory/2200-7-0x0000000000400000-0x0000000000404000-memory.dmp

Filesize
16KB

Download
memory/2200-4-0x0000000000400000-0x0000000000404000-memory.dmp

Filesize
16KB

Download
memory/2200-2-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2200-0-0x0000000000400000-0x0000000000404000-memory.dmp

Filesize
16KB

Download
memory/2200-11-0x0000000000400000-0x0000000000404000-memory.dmp

Filesize
16KB

Download