5b14e6b96f3ec9e936ce9f84d6220bb7af2680029a246654745c584a26a01d17

Analysis

max time kernel
147s
max time network
119s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
08-01-2024 13:56

Target

4b9f2cddf77610fe7b7b95c9634c7929.exe
Size

253KB
MD5

4b9f2cddf77610fe7b7b95c9634c7929
SHA1

b8ead9769d906504134c4c738e21e0b3d9347a55
SHA256

5b14e6b96f3ec9e936ce9f84d6220bb7af2680029a246654745c584a26a01d17
SHA512

35e04094192f19558db5debc8673bffd7d4d0dfaf14d5c69ad9df1347c54acd768636141f0032a2e844966ac9172acf58c02597130a51f854156724a179a5624
SSDEEP

6144:cCJ2rzBalIdvhbTXLAoYxV5kkwogR1pBhk:JJKBalIdZPLAzfGkhgRc

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 3516 set thread context of 1060	3516	4b9f2cddf77610fe7b7b95c9634c7929.exe	89

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3516	4b9f2cddf77610fe7b7b95c9634c7929.exe

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 3516 wrote to memory of 1060	3516	4b9f2cddf77610fe7b7b95c9634c7929.exe	89
PID 3516 wrote to memory of 1060	3516	4b9f2cddf77610fe7b7b95c9634c7929.exe	89
PID 3516 wrote to memory of 1060	3516	4b9f2cddf77610fe7b7b95c9634c7929.exe	89
PID 3516 wrote to memory of 1060	3516	4b9f2cddf77610fe7b7b95c9634c7929.exe	89
PID 3516 wrote to memory of 1060	3516	4b9f2cddf77610fe7b7b95c9634c7929.exe	89
PID 3516 wrote to memory of 1060	3516	4b9f2cddf77610fe7b7b95c9634c7929.exe	89
PID 3516 wrote to memory of 1060	3516	4b9f2cddf77610fe7b7b95c9634c7929.exe	89
PID 3516 wrote to memory of 1060	3516	4b9f2cddf77610fe7b7b95c9634c7929.exe	89

C:\Users\Admin\AppData\Local\Temp\4b9f2cddf77610fe7b7b95c9634c7929.exe
"C:\Users\Admin\AppData\Local\Temp\4b9f2cddf77610fe7b7b95c9634c7929.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3516
- C:\Users\Admin\AppData\Local\Temp\4b9f2cddf77610fe7b7b95c9634c7929.exe
  C:\Users\Admin\AppData\Local\Temp\4b9f2cddf77610fe7b7b95c9634c7929.exe
  2⤵
  PID:1060

memory/1060-4-0x0000000000400000-0x000000000045A000-memory.dmp

Filesize
360KB

Download
memory/1060-5-0x0000000000400000-0x000000000045A000-memory.dmp

Filesize
360KB

Download
memory/1060-7-0x0000000000400000-0x000000000045A000-memory.dmp

Filesize
360KB

Download
memory/1060-8-0x0000000000400000-0x000000000045A000-memory.dmp

Filesize
360KB

Download
memory/1060-9-0x0000000000400000-0x000000000045A000-memory.dmp

Filesize
360KB

Download
memory/3516-0-0x0000000000400000-0x0000000000456000-memory.dmp

Filesize
344KB

Download
memory/3516-1-0x00000000001D0000-0x00000000001D2000-memory.dmp

Filesize
8KB

Download
memory/3516-6-0x0000000000400000-0x0000000000456000-memory.dmp

Filesize
344KB

Download