f3283866c731029819824deb586caad22880488ac09ca06e64d8ee0c3147eba8

Analysis

max time kernel
120s
max time network
120s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
19/01/2024, 09:41

Target

674c57bdd5006f8f338c25aadb6a80e4.exe
Size

28KB
MD5

674c57bdd5006f8f338c25aadb6a80e4
SHA1

d44f74bcc5013b6a63eb3edbd48b9a7f542b63c0
SHA256

f3283866c731029819824deb586caad22880488ac09ca06e64d8ee0c3147eba8
SHA512

bfd9bcb83389378cbb741bcfc9d3a4eddc3bca3056750d4811a3b702221d6c1383c50904357a8d5bdae242ed9c03dd0629ba1f2b5f97346395032c5a26b5a544
SSDEEP

384:rUabNUEzh99Wiulegk0ovMjVNEbBgawpSo7oHgY3Bit7e6ll1j0jvEW:LR1a1egk0ovuVNEbBgawpIAiue6hO

Score

6^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2360	2140	WerFault.exe	28

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2652 set thread context of 2140	2652	674c57bdd5006f8f338c25aadb6a80e4.exe	28

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeIncBasePriorityPrivilege	2652	674c57bdd5006f8f338c25aadb6a80e4.exe

Suspicious use of WriteProcessMemory 12 IoCs

description	pid	Process	procid_target
PID 2652 wrote to memory of 2140	2652	674c57bdd5006f8f338c25aadb6a80e4.exe	28
PID 2652 wrote to memory of 2140	2652	674c57bdd5006f8f338c25aadb6a80e4.exe	28
PID 2652 wrote to memory of 2140	2652	674c57bdd5006f8f338c25aadb6a80e4.exe	28
PID 2652 wrote to memory of 2140	2652	674c57bdd5006f8f338c25aadb6a80e4.exe	28
PID 2652 wrote to memory of 2140	2652	674c57bdd5006f8f338c25aadb6a80e4.exe	28
PID 2652 wrote to memory of 2140	2652	674c57bdd5006f8f338c25aadb6a80e4.exe	28
PID 2652 wrote to memory of 2140	2652	674c57bdd5006f8f338c25aadb6a80e4.exe	28
PID 2652 wrote to memory of 2140	2652	674c57bdd5006f8f338c25aadb6a80e4.exe	28
PID 2140 wrote to memory of 2360	2140	IEXPLORE.EXE	29
PID 2140 wrote to memory of 2360	2140	IEXPLORE.EXE	29
PID 2140 wrote to memory of 2360	2140	IEXPLORE.EXE	29
PID 2140 wrote to memory of 2360	2140	IEXPLORE.EXE	29

memory/2140-0-0x0000000013140000-0x000000001324A000-memory.dmp

Filesize
1.0MB

Download
memory/2652-1-0x0000000014140000-0x0000000014149000-memory.dmp

Filesize
36KB

Download