b97ae66273e7c89777dd8b9bc3a128733b92726dc47564a4e7d8c99a2430dda2

Analysis

max time kernel
137s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
07-01-2024 02:54

Target

47d53d7d7fe2cf2f82ab89e40cf1989d.exe
Size

96KB
MD5

47d53d7d7fe2cf2f82ab89e40cf1989d
SHA1

412fab02f45d384dbad5b8f05f90db879b60639e
SHA256

b97ae66273e7c89777dd8b9bc3a128733b92726dc47564a4e7d8c99a2430dda2
SHA512

250a4018d8ad3b306571b06dba05e2a2fff6aee0c0baebf230888ca220ec4fb2f8d437ab977352a239db64dbce1c616722e33cd5030360e917dcdbae3e3f81c2
SSDEEP

3072:LepRD6ehYSeDir5BTldLW9Mxu0215/tq+ZvwXHcmhR:Le/Ddbr5dqNjlCzR

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 5036 set thread context of 3936	5036	47d53d7d7fe2cf2f82ab89e40cf1989d.exe	88

Suspicious behavior: EnumeratesProcesses 4 IoCs

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 5036 wrote to memory of 3936	5036	47d53d7d7fe2cf2f82ab89e40cf1989d.exe	88
PID 5036 wrote to memory of 3936	5036	47d53d7d7fe2cf2f82ab89e40cf1989d.exe	88
PID 5036 wrote to memory of 3936	5036	47d53d7d7fe2cf2f82ab89e40cf1989d.exe	88
PID 5036 wrote to memory of 3936	5036	47d53d7d7fe2cf2f82ab89e40cf1989d.exe	88
PID 5036 wrote to memory of 3936	5036	47d53d7d7fe2cf2f82ab89e40cf1989d.exe	88
PID 5036 wrote to memory of 3936	5036	47d53d7d7fe2cf2f82ab89e40cf1989d.exe	88
PID 5036 wrote to memory of 3936	5036	47d53d7d7fe2cf2f82ab89e40cf1989d.exe	88
PID 3936 wrote to memory of 3436	3936	47d53d7d7fe2cf2f82ab89e40cf1989d.exe	37
PID 3936 wrote to memory of 3436	3936	47d53d7d7fe2cf2f82ab89e40cf1989d.exe	37
PID 3936 wrote to memory of 3436	3936	47d53d7d7fe2cf2f82ab89e40cf1989d.exe	37
PID 3936 wrote to memory of 3436	3936	47d53d7d7fe2cf2f82ab89e40cf1989d.exe	37

memory/3436-9-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/3436-10-0x000000007FFD0000-0x000000007FFD1000-memory.dmp

Filesize
4KB

Download
memory/3936-1-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3936-0-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3936-5-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3936-6-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3936-7-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/3936-13-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3936-15-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/5036-3-0x0000000000400000-0x0000000000419000-memory.dmp

Filesize
100KB

Download