4872197d641f077b7e887e027bf28cbc1a0da085202fb5b950630bf1ec08e865

Analysis

max time kernel
185s
max time network
217s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
10/01/2024, 05:57

Target

4fc46e6da4c4007d9ffabef3f613dbbe.exe
Size

37KB
MD5

4fc46e6da4c4007d9ffabef3f613dbbe
SHA1

21fa87b9c7bc53336597a0b87b7961b08b7799ce
SHA256

4872197d641f077b7e887e027bf28cbc1a0da085202fb5b950630bf1ec08e865
SHA512

da7c8a990ea3283da4ee3126ecce615dfaa3d19b2d639b3a64d9a25858e69395ffcc187ef1accc5203639b775fe45048851a949119c025ca29351dae1f84e858
SSDEEP

768:92yLb8X/z4MmfgFMa+vWqL2wMuGQjfAuuwINpdkM79y79ApvRms8:9dA4MmfmMaDqBx3jnuwIfffpF8

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2920 set thread context of 3168	2920	4fc46e6da4c4007d9ffabef3f613dbbe.exe	90

Suspicious behavior: EnumeratesProcesses 4 IoCs

Suspicious use of WriteProcessMemory 13 IoCs

description	pid	Process	procid_target
PID 2920 wrote to memory of 3168	2920	4fc46e6da4c4007d9ffabef3f613dbbe.exe	90
PID 2920 wrote to memory of 3168	2920	4fc46e6da4c4007d9ffabef3f613dbbe.exe	90
PID 2920 wrote to memory of 3168	2920	4fc46e6da4c4007d9ffabef3f613dbbe.exe	90
PID 2920 wrote to memory of 3168	2920	4fc46e6da4c4007d9ffabef3f613dbbe.exe	90
PID 2920 wrote to memory of 3168	2920	4fc46e6da4c4007d9ffabef3f613dbbe.exe	90
PID 2920 wrote to memory of 3168	2920	4fc46e6da4c4007d9ffabef3f613dbbe.exe	90
PID 2920 wrote to memory of 3168	2920	4fc46e6da4c4007d9ffabef3f613dbbe.exe	90
PID 3168 wrote to memory of 3388	3168	4fc46e6da4c4007d9ffabef3f613dbbe.exe	51
PID 3168 wrote to memory of 3388	3168	4fc46e6da4c4007d9ffabef3f613dbbe.exe	51
PID 3168 wrote to memory of 3388	3168	4fc46e6da4c4007d9ffabef3f613dbbe.exe	51
PID 3168 wrote to memory of 3388	3168	4fc46e6da4c4007d9ffabef3f613dbbe.exe	51
PID 3168 wrote to memory of 3388	3168	4fc46e6da4c4007d9ffabef3f613dbbe.exe	51
PID 3168 wrote to memory of 3388	3168	4fc46e6da4c4007d9ffabef3f613dbbe.exe	51

memory/2920-0-0x0000000000400000-0x000000000040FFAC-memory.dmp

Filesize
63KB

Download
memory/2920-9-0x0000000000400000-0x000000000040FFAC-memory.dmp

Filesize
63KB

Download
memory/3168-1-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3168-2-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3168-6-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3168-7-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3168-8-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download
memory/3168-18-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download
memory/3388-10-0x000000007FFF0000-0x000000007FFF1000-memory.dmp

Filesize
4KB

Download
memory/3388-12-0x000000007FFC0000-0x000000007FFC6000-memory.dmp

Filesize
24KB

Download