Analysis
-
max time kernel
150s -
max time network
166s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
10-01-2024 20:04
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
517bc996ca1bd0a4069e109cff1c9bcf.exe
Resource
win7-20231129-en
windows7-x64
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
517bc996ca1bd0a4069e109cff1c9bcf.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
517bc996ca1bd0a4069e109cff1c9bcf.exe
-
Size
227KB
-
MD5
517bc996ca1bd0a4069e109cff1c9bcf
-
SHA1
334e849653632905a71c7afdfc7f1e2b3f27cc44
-
SHA256
4ef7e23ae13543d794cbf2931fa78cf7bbf7d9c73d953f615570543c9ba1f656
-
SHA512
e4665b0a1391c634a92f2c2b4eee2cbffc59027796147cafd573b63a0b10cbf31928485540c9853b9bc271044d376ddd159ae1a86da1becef4121d0c78eda75d
-
SSDEEP
3072:P8xW7VTCsVmuz+Ydh7f/+fmItroNaCKMz5LEK0sdf:HNH1znJfGfptrqg3y
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
description pid Process procid_target PID 756 set thread context of 3476 756 517bc996ca1bd0a4069e109cff1c9bcf.exe 91 -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 756 wrote to memory of 3476 756 517bc996ca1bd0a4069e109cff1c9bcf.exe 91 PID 756 wrote to memory of 3476 756 517bc996ca1bd0a4069e109cff1c9bcf.exe 91 PID 756 wrote to memory of 3476 756 517bc996ca1bd0a4069e109cff1c9bcf.exe 91