75f30a7cf6e75fc5594f785e3289e64a405ad53854f4c50d55b1d776d6f02546

Analysis

max time kernel
117s
max time network
120s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/01/2024, 04:26

Target

7660b4c6713d27faf81c5a00b9b173a3.exe
Size

85KB
MD5

7660b4c6713d27faf81c5a00b9b173a3
SHA1

f7ee5d96d868b609cd4c12291061e63d94369c9f
SHA256

75f30a7cf6e75fc5594f785e3289e64a405ad53854f4c50d55b1d776d6f02546
SHA512

c3992dbcd500ee9918061f135440075f3860e3657a685df8f25b0ac01d9de0f1a9e5693c88dda9a70b706f6bc1c10c501ad7c2b5edb40ca31f69e38290d23fa3
SSDEEP

1536:jBsApZmfLSEVgbg3w0JZM325w9WgXomZlgiLAms30cgiJwMCT+33h6TbY2wI:jWApZmDUgA332a0T0p8CTkx6TGI

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 828 set thread context of 2040	828	7660b4c6713d27faf81c5a00b9b173a3.exe	28

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2040	7660b4c6713d27faf81c5a00b9b173a3.exe
2040	7660b4c6713d27faf81c5a00b9b173a3.exe

Suspicious use of WriteProcessMemory 12 IoCs

description	pid	Process	procid_target
PID 828 wrote to memory of 2040	828	7660b4c6713d27faf81c5a00b9b173a3.exe	28
PID 828 wrote to memory of 2040	828	7660b4c6713d27faf81c5a00b9b173a3.exe	28
PID 828 wrote to memory of 2040	828	7660b4c6713d27faf81c5a00b9b173a3.exe	28
PID 828 wrote to memory of 2040	828	7660b4c6713d27faf81c5a00b9b173a3.exe	28
PID 828 wrote to memory of 2040	828	7660b4c6713d27faf81c5a00b9b173a3.exe	28
PID 828 wrote to memory of 2040	828	7660b4c6713d27faf81c5a00b9b173a3.exe	28
PID 828 wrote to memory of 2040	828	7660b4c6713d27faf81c5a00b9b173a3.exe	28
PID 828 wrote to memory of 2040	828	7660b4c6713d27faf81c5a00b9b173a3.exe	28
PID 2040 wrote to memory of 1200	2040	7660b4c6713d27faf81c5a00b9b173a3.exe	11
PID 2040 wrote to memory of 1200	2040	7660b4c6713d27faf81c5a00b9b173a3.exe	11
PID 2040 wrote to memory of 1200	2040	7660b4c6713d27faf81c5a00b9b173a3.exe	11
PID 2040 wrote to memory of 1200	2040	7660b4c6713d27faf81c5a00b9b173a3.exe	11

memory/828-0-0x0000000000400000-0x0000000000422000-memory.dmp

Filesize
136KB

Download
memory/828-1-0x0000000000400000-0x0000000000422000-memory.dmp

Filesize
136KB

Download
memory/828-2-0x0000000000220000-0x000000000022A000-memory.dmp

Filesize
40KB

Download
memory/828-8-0x0000000000230000-0x0000000000252000-memory.dmp

Filesize
136KB

Download
memory/828-20-0x0000000000400000-0x0000000000422000-memory.dmp

Filesize
136KB

Download
memory/1200-28-0x000000007EFD0000-0x000000007EFD1000-memory.dmp

Filesize
4KB

Download
memory/1200-25-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/2040-16-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2040-17-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2040-13-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2040-22-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2040-23-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2040-24-0x0000000010000000-0x0000000010012000-memory.dmp

Filesize
72KB

Download
memory/2040-11-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2040-9-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2040-38-0x0000000010000000-0x0000000010012000-memory.dmp

Filesize
72KB

Download