e2e83f1ebd6372895aa9246854b7fa9e9a7799af0a8472c11677ae489e45d18f

Analysis

max time kernel
142s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
12/01/2024, 00:52

Target

550ab4b65c85ad5d252550fe51dc18e0.exe
Size

394KB
MD5

550ab4b65c85ad5d252550fe51dc18e0
SHA1

f385de5e091c7450ee2819dd177a676871ba5b53
SHA256

e2e83f1ebd6372895aa9246854b7fa9e9a7799af0a8472c11677ae489e45d18f
SHA512

d9352af0290913c7627e0839548d8c1c6a0b3094142f23073cd03b01ee3c168837f17ee1fb83d50f5f0df46c1e1201bd67370206660f75170956c6726d844df9
SSDEEP

6144:YujryfGr2CrQeZpAKpw+Uzk1Hlnw6PJTDpAXqYCUwoXWKraBCDoeA1r:Y0rQgDpp1FnhhTgVOKraBN

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 3028 set thread context of 1320	3028	550ab4b65c85ad5d252550fe51dc18e0.exe	28

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2784	1320	WerFault.exe	28

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3028	550ab4b65c85ad5d252550fe51dc18e0.exe

Suspicious use of WriteProcessMemory 12 IoCs

description	pid	Process	procid_target
PID 3028 wrote to memory of 1320	3028	550ab4b65c85ad5d252550fe51dc18e0.exe	28
PID 3028 wrote to memory of 1320	3028	550ab4b65c85ad5d252550fe51dc18e0.exe	28
PID 3028 wrote to memory of 1320	3028	550ab4b65c85ad5d252550fe51dc18e0.exe	28
PID 3028 wrote to memory of 1320	3028	550ab4b65c85ad5d252550fe51dc18e0.exe	28
PID 3028 wrote to memory of 1320	3028	550ab4b65c85ad5d252550fe51dc18e0.exe	28
PID 3028 wrote to memory of 1320	3028	550ab4b65c85ad5d252550fe51dc18e0.exe	28
PID 3028 wrote to memory of 1320	3028	550ab4b65c85ad5d252550fe51dc18e0.exe	28
PID 3028 wrote to memory of 1320	3028	550ab4b65c85ad5d252550fe51dc18e0.exe	28
PID 1320 wrote to memory of 2784	1320	550ab4b65c85ad5d252550fe51dc18e0.exe	29
PID 1320 wrote to memory of 2784	1320	550ab4b65c85ad5d252550fe51dc18e0.exe	29
PID 1320 wrote to memory of 2784	1320	550ab4b65c85ad5d252550fe51dc18e0.exe	29
PID 1320 wrote to memory of 2784	1320	550ab4b65c85ad5d252550fe51dc18e0.exe	29

memory/1320-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1320-6-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3028-0-0x0000000000400000-0x0000000000522000-memory.dmp

Filesize
1.1MB

Download
memory/3028-7-0x0000000000400000-0x0000000000522000-memory.dmp

Filesize
1.1MB

Download