880f63ff66c4ff99951172543e5323318832a3cef3f61530c19311a8e84b6f5b

Analysis

max time kernel
143s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
23/01/2024, 21:21

Target

7097231557184e207cf113bf5910368c.exe
Size

217KB
MD5

7097231557184e207cf113bf5910368c
SHA1

65da54019f144a6f0dc1f2a110f67048af0e40fb
SHA256

880f63ff66c4ff99951172543e5323318832a3cef3f61530c19311a8e84b6f5b
SHA512

241714c0b6199acf0362178f3ae1cd2e2606ce539dda7ce5e646c154227b36b59a4d746d50dc211f7163ac38b31a2587c8cc9eb0e70e7bfaa9f0f717bce26715
SSDEEP

3072:bnASUq6bJLRAoHXQlWjhe+7Cn2lMw+EDtP/YrP6f0IT+ktQnvD:zV+bJLRLuYhp+nCMw+Ctnhf0L8KD

Score

5^/10

Suspicious use of SetThreadContext 2 IoCs

description	pid	Process	procid_target
PID 3228 set thread context of 4696	3228	7097231557184e207cf113bf5910368c.exe	86
PID 4696 set thread context of 2568	4696	7097231557184e207cf113bf5910368c.exe	88

Suspicious behavior: EnumeratesProcesses 4 IoCs

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3228	7097231557184e207cf113bf5910368c.exe
4696	7097231557184e207cf113bf5910368c.exe

Suspicious use of WriteProcessMemory 19 IoCs

description	pid	Process	procid_target
PID 3228 wrote to memory of 4696	3228	7097231557184e207cf113bf5910368c.exe	86
PID 3228 wrote to memory of 4696	3228	7097231557184e207cf113bf5910368c.exe	86
PID 3228 wrote to memory of 4696	3228	7097231557184e207cf113bf5910368c.exe	86
PID 3228 wrote to memory of 4696	3228	7097231557184e207cf113bf5910368c.exe	86
PID 3228 wrote to memory of 4696	3228	7097231557184e207cf113bf5910368c.exe	86
PID 3228 wrote to memory of 4696	3228	7097231557184e207cf113bf5910368c.exe	86
PID 3228 wrote to memory of 4696	3228	7097231557184e207cf113bf5910368c.exe	86
PID 3228 wrote to memory of 4696	3228	7097231557184e207cf113bf5910368c.exe	86
PID 4696 wrote to memory of 2568	4696	7097231557184e207cf113bf5910368c.exe	88
PID 4696 wrote to memory of 2568	4696	7097231557184e207cf113bf5910368c.exe	88
PID 4696 wrote to memory of 2568	4696	7097231557184e207cf113bf5910368c.exe	88
PID 4696 wrote to memory of 2568	4696	7097231557184e207cf113bf5910368c.exe	88
PID 4696 wrote to memory of 2568	4696	7097231557184e207cf113bf5910368c.exe	88
PID 4696 wrote to memory of 2568	4696	7097231557184e207cf113bf5910368c.exe	88
PID 4696 wrote to memory of 2568	4696	7097231557184e207cf113bf5910368c.exe	88
PID 2568 wrote to memory of 3556	2568	7097231557184e207cf113bf5910368c.exe	55
PID 2568 wrote to memory of 3556	2568	7097231557184e207cf113bf5910368c.exe	55
PID 2568 wrote to memory of 3556	2568	7097231557184e207cf113bf5910368c.exe	55
PID 2568 wrote to memory of 3556	2568	7097231557184e207cf113bf5910368c.exe	55

memory/2568-15-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/2568-23-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/2568-21-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2568-9-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2568-11-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2568-14-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3228-6-0x0000000000400000-0x0000000000419000-memory.dmp

Filesize
100KB

Download
memory/3228-0-0x0000000000400000-0x0000000000419000-memory.dmp

Filesize
100KB

Download
memory/3556-17-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/3556-18-0x000000007FFD0000-0x000000007FFD1000-memory.dmp

Filesize
4KB

Download
memory/4696-12-0x0000000000400000-0x0000000000419000-memory.dmp

Filesize
100KB

Download
memory/4696-3-0x0000000000400000-0x0000000000419000-memory.dmp

Filesize
100KB

Download
memory/4696-5-0x0000000000400000-0x0000000000419000-memory.dmp

Filesize
100KB

Download