61b87dcb98afdc53b66fa145076cc564d61bc8dfeef6a64057e9220550e9cc7c

Analysis

max time kernel
142s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
15/01/2024, 02:03

Target

5979abfafb5fd41b1122c0a195ca5c0a.exe
Size

55KB
MD5

5979abfafb5fd41b1122c0a195ca5c0a
SHA1

7283250caba3ba17bdf7421bb38086ed11e9bc98
SHA256

61b87dcb98afdc53b66fa145076cc564d61bc8dfeef6a64057e9220550e9cc7c
SHA512

800df4e795e9e32318ba1690b27cdf754df9077d83c0f6371caf6d1b4a335ef4f2abd752ebf1a9dcbf6b08c823db0dc8f1ccbb0ff891585335a41e8ca4f10eca
SSDEEP

768:DZ8bD9cBuDhs6oYBAFDUM9EG9YbcmfW0M7+71Ong+0prOIoAJuFdPYwdb/L/pU6U:Dq9cBuCb5KSDa5VbprBo6uXFd3ODkS

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 968 set thread context of 2796	968	5979abfafb5fd41b1122c0a195ca5c0a.exe	83

Suspicious behavior: EnumeratesProcesses 4 IoCs

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
968	5979abfafb5fd41b1122c0a195ca5c0a.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 968 wrote to memory of 2796	968	5979abfafb5fd41b1122c0a195ca5c0a.exe	83
PID 968 wrote to memory of 2796	968	5979abfafb5fd41b1122c0a195ca5c0a.exe	83
PID 968 wrote to memory of 2796	968	5979abfafb5fd41b1122c0a195ca5c0a.exe	83
PID 968 wrote to memory of 2796	968	5979abfafb5fd41b1122c0a195ca5c0a.exe	83
PID 968 wrote to memory of 2796	968	5979abfafb5fd41b1122c0a195ca5c0a.exe	83
PID 968 wrote to memory of 2796	968	5979abfafb5fd41b1122c0a195ca5c0a.exe	83
PID 968 wrote to memory of 2796	968	5979abfafb5fd41b1122c0a195ca5c0a.exe	83
PID 2796 wrote to memory of 3420	2796	5979abfafb5fd41b1122c0a195ca5c0a.exe	42
PID 2796 wrote to memory of 3420	2796	5979abfafb5fd41b1122c0a195ca5c0a.exe	42
PID 2796 wrote to memory of 3420	2796	5979abfafb5fd41b1122c0a195ca5c0a.exe	42
PID 2796 wrote to memory of 3420	2796	5979abfafb5fd41b1122c0a195ca5c0a.exe	42

memory/968-0-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/968-8-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2796-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2796-5-0x0000000000400000-0x0000000000408960-memory.dmp

Filesize
34KB

Download
memory/2796-6-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2796-7-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2796-9-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/2796-15-0x0000000000400000-0x0000000000408960-memory.dmp

Filesize
34KB

Download
memory/2796-16-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/3420-10-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/3420-11-0x000000007FFD0000-0x000000007FFD1000-memory.dmp

Filesize
4KB

Download