53ee3360915889c00c6ebd8bd96c1fb8836f022075899a339f9d5f094519975c

Analysis

max time kernel
143s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
27/01/2024, 06:12

Target

797aab994063f402237de3c14ea8b370.exe
Size

27KB
MD5

797aab994063f402237de3c14ea8b370
SHA1

308840d4ac5653430794e67ba886ee3a4e4a2c27
SHA256

53ee3360915889c00c6ebd8bd96c1fb8836f022075899a339f9d5f094519975c
SHA512

c1feb42b7212433614e23e4ebf62c1d0e1e83d815d6ee2effcee9f2d1810d73602c59ff0472f41b8d9ae75e7482acd2d1d4560adc1271b2e56c05b7c0ab35f63
SSDEEP

768:qCyAqlYmQTDwrzTSkIjOsUUQSdwk4IWRZn:KAqlYmQTsEUUQSTE

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 4440 set thread context of 5056	4440	797aab994063f402237de3c14ea8b370.exe	84

Suspicious use of WriteProcessMemory 9 IoCs

description	pid	Process	procid_target
PID 4440 wrote to memory of 5056	4440	797aab994063f402237de3c14ea8b370.exe	84
PID 4440 wrote to memory of 5056	4440	797aab994063f402237de3c14ea8b370.exe	84
PID 4440 wrote to memory of 5056	4440	797aab994063f402237de3c14ea8b370.exe	84
PID 4440 wrote to memory of 5056	4440	797aab994063f402237de3c14ea8b370.exe	84
PID 4440 wrote to memory of 5056	4440	797aab994063f402237de3c14ea8b370.exe	84
PID 4440 wrote to memory of 5056	4440	797aab994063f402237de3c14ea8b370.exe	84
PID 4440 wrote to memory of 5056	4440	797aab994063f402237de3c14ea8b370.exe	84
PID 4440 wrote to memory of 5056	4440	797aab994063f402237de3c14ea8b370.exe	84
PID 4440 wrote to memory of 5056	4440	797aab994063f402237de3c14ea8b370.exe	84

C:\Users\Admin\AppData\Local\Temp\797aab994063f402237de3c14ea8b370.exe
"C:\Users\Admin\AppData\Local\Temp\797aab994063f402237de3c14ea8b370.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:4440
- C:\Users\Admin\AppData\Local\Temp\797aab994063f402237de3c14ea8b370.exe
  "C:\Users\Admin\AppData\Local\Temp\797aab994063f402237de3c14ea8b370.exe"
  2⤵
  PID:5056

memory/4440-5-0x0000000000400000-0x000000000040E000-memory.dmp

Filesize
56KB

Download
memory/5056-0-0x0000000000400000-0x0000000000405000-memory.dmp

Filesize
20KB

Download
memory/5056-1-0x0000000000400000-0x0000000000405000-memory.dmp

Filesize
20KB

Download
memory/5056-2-0x0000000000400000-0x0000000000405000-memory.dmp

Filesize
20KB

Download
memory/5056-6-0x0000000000400000-0x0000000000405000-memory.dmp

Filesize
20KB

Download
memory/5056-7-0x0000000000400000-0x0000000000405000-memory.dmp

Filesize
20KB

Download