e2e83f1ebd6372895aa9246854b7fa9e9a7799af0a8472c11677ae489e45d18f

Analysis

max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
12/01/2024, 00:52

Target

550ab4b65c85ad5d252550fe51dc18e0.exe
Size

394KB
MD5

550ab4b65c85ad5d252550fe51dc18e0
SHA1

f385de5e091c7450ee2819dd177a676871ba5b53
SHA256

e2e83f1ebd6372895aa9246854b7fa9e9a7799af0a8472c11677ae489e45d18f
SHA512

d9352af0290913c7627e0839548d8c1c6a0b3094142f23073cd03b01ee3c168837f17ee1fb83d50f5f0df46c1e1201bd67370206660f75170956c6726d844df9
SSDEEP

6144:YujryfGr2CrQeZpAKpw+Uzk1Hlnw6PJTDpAXqYCUwoXWKraBCDoeA1r:Y0rQgDpp1FnhhTgVOKraBN

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 3596 set thread context of 324	3596	550ab4b65c85ad5d252550fe51dc18e0.exe	30

Suspicious behavior: EnumeratesProcesses 4 IoCs

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3596	550ab4b65c85ad5d252550fe51dc18e0.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 3596 wrote to memory of 324	3596	550ab4b65c85ad5d252550fe51dc18e0.exe	30
PID 3596 wrote to memory of 324	3596	550ab4b65c85ad5d252550fe51dc18e0.exe	30
PID 3596 wrote to memory of 324	3596	550ab4b65c85ad5d252550fe51dc18e0.exe	30
PID 3596 wrote to memory of 324	3596	550ab4b65c85ad5d252550fe51dc18e0.exe	30
PID 3596 wrote to memory of 324	3596	550ab4b65c85ad5d252550fe51dc18e0.exe	30
PID 3596 wrote to memory of 324	3596	550ab4b65c85ad5d252550fe51dc18e0.exe	30
PID 3596 wrote to memory of 324	3596	550ab4b65c85ad5d252550fe51dc18e0.exe	30
PID 324 wrote to memory of 3500	324	550ab4b65c85ad5d252550fe51dc18e0.exe	49
PID 324 wrote to memory of 3500	324	550ab4b65c85ad5d252550fe51dc18e0.exe	49
PID 324 wrote to memory of 3500	324	550ab4b65c85ad5d252550fe51dc18e0.exe	49
PID 324 wrote to memory of 3500	324	550ab4b65c85ad5d252550fe51dc18e0.exe	49

memory/324-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/324-7-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/324-5-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/324-8-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/324-15-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/324-14-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3500-9-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/3500-10-0x000000007FFD0000-0x000000007FFD1000-memory.dmp

Filesize
4KB

Download
memory/3596-0-0x0000000000400000-0x0000000000522000-memory.dmp

Filesize
1.1MB

Download
memory/3596-6-0x0000000000400000-0x0000000000522000-memory.dmp

Filesize
1.1MB

Download