951adc25ccc2790dd70c660bb0c608ae91da90cd64ca0d87a14588b74b881e0c

Analysis

max time kernel
110s
max time network
64s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
06/01/2024, 04:15

Target

45417f472613d4c913f77303817b5a90.exe
Size

150KB
MD5

45417f472613d4c913f77303817b5a90
SHA1

56e4dfd7340bd499d5006810ddd5e98f532538cb
SHA256

951adc25ccc2790dd70c660bb0c608ae91da90cd64ca0d87a14588b74b881e0c
SHA512

0f767fb6cc0bff8bcac3ec7d42550f28f6a2e2ad0ff728151e282f10cb709383ed823e9a331044f2a3753acfaaef1b731e34f89498d5a27ddf14a2425b1b43f4
SSDEEP

3072:zK60n2//tmqcTM80SSxGuB7OYwvEcJH9mmt2x3pghN6kGs3Gq:zK6FHt72MjSYBiYwvEc6Q2x3EAs5

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 4648 set thread context of 4616	4648	45417f472613d4c913f77303817b5a90.exe	20

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4616	45417f472613d4c913f77303817b5a90.exe

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 4648 wrote to memory of 4616	4648	45417f472613d4c913f77303817b5a90.exe	20
PID 4648 wrote to memory of 4616	4648	45417f472613d4c913f77303817b5a90.exe	20
PID 4648 wrote to memory of 4616	4648	45417f472613d4c913f77303817b5a90.exe	20
PID 4648 wrote to memory of 4616	4648	45417f472613d4c913f77303817b5a90.exe	20
PID 4648 wrote to memory of 4616	4648	45417f472613d4c913f77303817b5a90.exe	20

C:\Users\Admin\AppData\Local\Temp\45417f472613d4c913f77303817b5a90.exe
"C:\Users\Admin\AppData\Local\Temp\45417f472613d4c913f77303817b5a90.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:4648
- C:\Users\Admin\AppData\Local\Temp\45417f472613d4c913f77303817b5a90.exe
  C:\Users\Admin\AppData\Local\Temp\45417f472613d4c913f77303817b5a90.exe
  2⤵
  - Suspicious use of SetWindowsHookEx
  PID:4616

memory/4616-3-0x0000000000400000-0x0000000000404000-memory.dmp

Filesize
16KB

Download
memory/4616-0-0x0000000000400000-0x0000000000404000-memory.dmp

Filesize
16KB

Download
memory/4616-6-0x0000000000400000-0x0000000000404000-memory.dmp

Filesize
16KB

Download
memory/4648-2-0x0000000032100000-0x0000000032134000-memory.dmp

Filesize
208KB

Download