4872197d641f077b7e887e027bf28cbc1a0da085202fb5b950630bf1ec08e865

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
10/01/2024, 05:57

Target

4fc46e6da4c4007d9ffabef3f613dbbe.exe
Size

37KB
MD5

4fc46e6da4c4007d9ffabef3f613dbbe
SHA1

21fa87b9c7bc53336597a0b87b7961b08b7799ce
SHA256

4872197d641f077b7e887e027bf28cbc1a0da085202fb5b950630bf1ec08e865
SHA512

da7c8a990ea3283da4ee3126ecce615dfaa3d19b2d639b3a64d9a25858e69395ffcc187ef1accc5203639b775fe45048851a949119c025ca29351dae1f84e858
SSDEEP

768:92yLb8X/z4MmfgFMa+vWqL2wMuGQjfAuuwINpdkM79y79ApvRms8:9dA4MmfmMaDqBx3jnuwIfffpF8

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2420 set thread context of 2756	2420	4fc46e6da4c4007d9ffabef3f613dbbe.exe	28

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2756	4fc46e6da4c4007d9ffabef3f613dbbe.exe
2756	4fc46e6da4c4007d9ffabef3f613dbbe.exe

Suspicious use of WriteProcessMemory 14 IoCs

description	pid	Process	procid_target
PID 2420 wrote to memory of 2756	2420	4fc46e6da4c4007d9ffabef3f613dbbe.exe	28
PID 2420 wrote to memory of 2756	2420	4fc46e6da4c4007d9ffabef3f613dbbe.exe	28
PID 2420 wrote to memory of 2756	2420	4fc46e6da4c4007d9ffabef3f613dbbe.exe	28
PID 2420 wrote to memory of 2756	2420	4fc46e6da4c4007d9ffabef3f613dbbe.exe	28
PID 2420 wrote to memory of 2756	2420	4fc46e6da4c4007d9ffabef3f613dbbe.exe	28
PID 2420 wrote to memory of 2756	2420	4fc46e6da4c4007d9ffabef3f613dbbe.exe	28
PID 2420 wrote to memory of 2756	2420	4fc46e6da4c4007d9ffabef3f613dbbe.exe	28
PID 2420 wrote to memory of 2756	2420	4fc46e6da4c4007d9ffabef3f613dbbe.exe	28
PID 2756 wrote to memory of 1328	2756	4fc46e6da4c4007d9ffabef3f613dbbe.exe	13
PID 2756 wrote to memory of 1328	2756	4fc46e6da4c4007d9ffabef3f613dbbe.exe	13
PID 2756 wrote to memory of 1328	2756	4fc46e6da4c4007d9ffabef3f613dbbe.exe	13
PID 2756 wrote to memory of 1328	2756	4fc46e6da4c4007d9ffabef3f613dbbe.exe	13
PID 2756 wrote to memory of 1328	2756	4fc46e6da4c4007d9ffabef3f613dbbe.exe	13
PID 2756 wrote to memory of 1328	2756	4fc46e6da4c4007d9ffabef3f613dbbe.exe	13

memory/1328-14-0x000000007FFF0000-0x000000007FFF1000-memory.dmp

Filesize
4KB

Download
memory/1328-22-0x000000007EFC0000-0x000000007EFC6000-memory.dmp

Filesize
24KB

Download
memory/2420-11-0x0000000000400000-0x000000000040FFAC-memory.dmp

Filesize
63KB

Download
memory/2756-2-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2756-0-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2756-4-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2756-8-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2756-7-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2756-13-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2756-17-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2756-18-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download