9e6159308007165eea4fa42efbb015877ad28d715b14fdc3f9db20378e92d5e8

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
10/01/2024, 09:32

Target

50354a2472789f846b288f206f443c19.exe
Size

45KB
MD5

50354a2472789f846b288f206f443c19
SHA1

960009816e11497ae5ad13538b21ab2d88397f04
SHA256

9e6159308007165eea4fa42efbb015877ad28d715b14fdc3f9db20378e92d5e8
SHA512

5d697e86c8c310401e50ef5462a0cd0c001cc20642c712601c4f7a40dceb40210645a1b598bce496310279a0e7b8cd0d3d85ddb8fee67cfcd259e899f40a2c6a
SSDEEP

768:Vu0DuqO8+S9aZG8uuwfsaZsZTYPB6sqtB/ZenFHmQWFon67uWLNvhaUg2n7M:jD0Bkpzf2WPws6gFGQWFofAJfXM

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1472 set thread context of 2344	1472	50354a2472789f846b288f206f443c19.exe	14

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 1472 wrote to memory of 2344	1472	50354a2472789f846b288f206f443c19.exe	14
PID 1472 wrote to memory of 2344	1472	50354a2472789f846b288f206f443c19.exe	14
PID 1472 wrote to memory of 2344	1472	50354a2472789f846b288f206f443c19.exe	14
PID 1472 wrote to memory of 2344	1472	50354a2472789f846b288f206f443c19.exe	14
PID 1472 wrote to memory of 2344	1472	50354a2472789f846b288f206f443c19.exe	14
PID 1472 wrote to memory of 2344	1472	50354a2472789f846b288f206f443c19.exe	14
PID 1472 wrote to memory of 2344	1472	50354a2472789f846b288f206f443c19.exe	14
PID 1472 wrote to memory of 2344	1472	50354a2472789f846b288f206f443c19.exe	14
PID 1472 wrote to memory of 2344	1472	50354a2472789f846b288f206f443c19.exe	14
PID 1472 wrote to memory of 2344	1472	50354a2472789f846b288f206f443c19.exe	14

C:\Users\Admin\AppData\Local\Temp\50354a2472789f846b288f206f443c19.exe
"C:\Users\Admin\AppData\Local\Temp\50354a2472789f846b288f206f443c19.exe"
1⤵
PID:2344

memory/1472-1-0x00000000002A0000-0x00000000002C0000-memory.dmp

Filesize
128KB

Download
memory/1472-0-0x0000000000400000-0x0000000000420000-memory.dmp

Filesize
128KB

Download
memory/1472-19-0x0000000000400000-0x0000000000420000-memory.dmp

Filesize
128KB

Download
memory/2344-21-0x0000000000400000-0x0000000000421000-memory.dmp

Filesize
132KB

Download
memory/2344-24-0x0000000000400000-0x0000000000421000-memory.dmp

Filesize
132KB

Download
memory/2344-23-0x0000000000400000-0x0000000000421000-memory.dmp

Filesize
132KB

Download
memory/2344-22-0x0000000000400000-0x0000000000421000-memory.dmp

Filesize
132KB

Download
memory/2344-16-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2344-15-0x0000000000400000-0x0000000000421000-memory.dmp

Filesize
132KB

Download
memory/2344-12-0x0000000000400000-0x0000000000421000-memory.dmp

Filesize
132KB

Download
memory/2344-9-0x0000000000400000-0x0000000000421000-memory.dmp

Filesize
132KB

Download
memory/2344-6-0x0000000000400000-0x0000000000421000-memory.dmp

Filesize
132KB

Download
memory/2344-2-0x0000000000400000-0x0000000000421000-memory.dmp

Filesize
132KB

Download
memory/2344-4-0x0000000000400000-0x0000000000421000-memory.dmp

Filesize
132KB

Download
memory/2344-26-0x0000000000400000-0x0000000000421000-memory.dmp

Filesize
132KB

Download