e25a08b9c2e12a9a28e7d3b8c8118127ccc5a73668f8b053113b6918b42ebd04

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
11/01/2024, 06:26

Target

tmp.exe
Size

664KB
MD5

343863843ccaeb8ecea99adb6311ff91
SHA1

e526e5dcfddead88826609d05c33cc3146d9330f
SHA256

e25a08b9c2e12a9a28e7d3b8c8118127ccc5a73668f8b053113b6918b42ebd04
SHA512

02647e299a1655fb5fe5cb7cc6c902e0042a89aa748629e94f661ca5b276c9819f319d8ae12b42a213587bbad6a0aca5ec04c6a38365bdb2e99a54109863e723
SSDEEP

12288:ZOAbfhJqopmqZY9OLt/5ZxAT15CjUYcT1WEtUxl:ZjEoUGLLt/VS15b11WE

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1940 set thread context of 2652	1940	tmp.exe	28

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2808	2652	WerFault.exe	28

Suspicious use of WriteProcessMemory 17 IoCs

description	pid	Process	procid_target
PID 1940 wrote to memory of 2652	1940	tmp.exe	28
PID 1940 wrote to memory of 2652	1940	tmp.exe	28
PID 1940 wrote to memory of 2652	1940	tmp.exe	28
PID 1940 wrote to memory of 2652	1940	tmp.exe	28
PID 1940 wrote to memory of 2652	1940	tmp.exe	28
PID 1940 wrote to memory of 2652	1940	tmp.exe	28
PID 1940 wrote to memory of 2652	1940	tmp.exe	28
PID 1940 wrote to memory of 2652	1940	tmp.exe	28
PID 1940 wrote to memory of 2652	1940	tmp.exe	28
PID 1940 wrote to memory of 2652	1940	tmp.exe	28
PID 1940 wrote to memory of 2652	1940	tmp.exe	28
PID 1940 wrote to memory of 2652	1940	tmp.exe	28
PID 1940 wrote to memory of 2652	1940	tmp.exe	28
PID 2652 wrote to memory of 2808	2652	RegAsm.exe	29
PID 2652 wrote to memory of 2808	2652	RegAsm.exe	29
PID 2652 wrote to memory of 2808	2652	RegAsm.exe	29
PID 2652 wrote to memory of 2808	2652	RegAsm.exe	29

memory/1940-1-0x0000000074870000-0x0000000074F5E000-memory.dmp

Filesize
6.9MB

Download
memory/1940-2-0x0000000004BE0000-0x0000000004C20000-memory.dmp

Filesize
256KB

Download
memory/1940-4-0x0000000000450000-0x0000000000451000-memory.dmp

Filesize
4KB

Download
memory/1940-3-0x0000000000450000-0x0000000000451000-memory.dmp

Filesize
4KB

Download
memory/1940-16-0x0000000000450000-0x0000000000451000-memory.dmp

Filesize
4KB

Download
memory/1940-17-0x0000000074870000-0x0000000074F5E000-memory.dmp

Filesize
6.9MB

Download
memory/1940-0-0x0000000000FB0000-0x000000000105C000-memory.dmp

Filesize
688KB

Download
memory/2652-9-0x0000000000400000-0x000000000049A000-memory.dmp

Filesize
616KB

Download
memory/2652-11-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2652-10-0x0000000000400000-0x000000000049A000-memory.dmp

Filesize
616KB

Download
memory/2652-13-0x0000000000400000-0x000000000049A000-memory.dmp

Filesize
616KB

Download
memory/2652-5-0x0000000000400000-0x000000000049A000-memory.dmp

Filesize
616KB

Download
memory/2652-15-0x0000000000400000-0x000000000049A000-memory.dmp

Filesize
616KB

Download
memory/2652-7-0x0000000000400000-0x000000000049A000-memory.dmp

Filesize
616KB

Download
memory/2652-6-0x0000000000400000-0x000000000049A000-memory.dmp

Filesize
616KB

Download