90e1d50a6d04d91f8edf0a9659e5407f866698b4be17db4b823035fe932249f8

Analysis

max time kernel
119s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
22/01/2024, 15:00

Target

6fb9daf957d41a031b52772c99365638.exe
Size

152KB
MD5

6fb9daf957d41a031b52772c99365638
SHA1

99578f8eee5c8148a379392266978468dbe07442
SHA256

90e1d50a6d04d91f8edf0a9659e5407f866698b4be17db4b823035fe932249f8
SHA512

60868cb0e373d7af0fb4cd19e89fbfe6a0b454ea9b0571ff3f3c9cf39a226628db12175d037c8e6c55a792873b475c0af09cd1e6f3d270435a2a5632a4a9bfcd
SSDEEP

1536:THJhfJN2eSkMKd1wtZTmmfAaa7qdWz+lbsN2uZNoUmDs6YHFJJ:Dd1wtZT9fLWz+lbsWWHFJJ

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2216 set thread context of 2180	2216	6fb9daf957d41a031b52772c99365638.exe	28

Suspicious use of WriteProcessMemory 9 IoCs

description	pid	Process	procid_target
PID 2216 wrote to memory of 2180	2216	6fb9daf957d41a031b52772c99365638.exe	28
PID 2216 wrote to memory of 2180	2216	6fb9daf957d41a031b52772c99365638.exe	28
PID 2216 wrote to memory of 2180	2216	6fb9daf957d41a031b52772c99365638.exe	28
PID 2216 wrote to memory of 2180	2216	6fb9daf957d41a031b52772c99365638.exe	28
PID 2216 wrote to memory of 2180	2216	6fb9daf957d41a031b52772c99365638.exe	28
PID 2216 wrote to memory of 2180	2216	6fb9daf957d41a031b52772c99365638.exe	28
PID 2216 wrote to memory of 2180	2216	6fb9daf957d41a031b52772c99365638.exe	28
PID 2216 wrote to memory of 2180	2216	6fb9daf957d41a031b52772c99365638.exe	28
PID 2216 wrote to memory of 2180	2216	6fb9daf957d41a031b52772c99365638.exe	28

C:\Users\Admin\AppData\Local\Temp\6fb9daf957d41a031b52772c99365638.exe
"C:\Users\Admin\AppData\Local\Temp\6fb9daf957d41a031b52772c99365638.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:2216
- C:\Users\Admin\AppData\Local\Temp\6fb9daf957d41a031b52772c99365638.exe
  "C:\Users\Admin\AppData\Local\Temp\6fb9daf957d41a031b52772c99365638.exe"
  2⤵
  PID:2180

memory/2180-0-0x0000000000400000-0x000000000040F000-memory.dmp

Filesize
60KB

Download
memory/2180-2-0x0000000000400000-0x000000000040F000-memory.dmp

Filesize
60KB

Download
memory/2180-4-0x0000000000400000-0x000000000040F000-memory.dmp

Filesize
60KB

Download
memory/2180-6-0x0000000000400000-0x000000000040F000-memory.dmp

Filesize
60KB

Download
memory/2180-8-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2180-10-0x0000000000400000-0x000000000040F000-memory.dmp

Filesize
60KB

Download