e2d237a490e601ebed936a0655003afb5590f6d45a911fd02d022d9c6bb36c67

Analysis

max time kernel
141s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
27/01/2024, 06:53

Target

79904e777233bb1b3d2a2023e28d6ba7.exe
Size

48KB
MD5

79904e777233bb1b3d2a2023e28d6ba7
SHA1

26728a47b0b7474a7d2fae14a348814aa1533695
SHA256

e2d237a490e601ebed936a0655003afb5590f6d45a911fd02d022d9c6bb36c67
SHA512

75c1d139d52b484cfa14c4543bc4bc590bbcf4210ffd242d5658b4ef3fc425142e9ecc33ff6f361341ce0c13f9664ae3f380ada58f6162cc446ed6f63a479673
SSDEEP

384:DiZWzJocLHrUfvEbHLNezGXrzcOuZea1XWRE9179pRxjk6y2mI4oj+:DiszJonGR1xupXWRGN91jk6y2mI4oj

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1300 set thread context of 2264	1300	79904e777233bb1b3d2a2023e28d6ba7.exe	28

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3040	2264	WerFault.exe	28

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1300	79904e777233bb1b3d2a2023e28d6ba7.exe

Suspicious use of WriteProcessMemory 14 IoCs

description	pid	Process	procid_target
PID 1300 wrote to memory of 2264	1300	79904e777233bb1b3d2a2023e28d6ba7.exe	28
PID 1300 wrote to memory of 2264	1300	79904e777233bb1b3d2a2023e28d6ba7.exe	28
PID 1300 wrote to memory of 2264	1300	79904e777233bb1b3d2a2023e28d6ba7.exe	28
PID 1300 wrote to memory of 2264	1300	79904e777233bb1b3d2a2023e28d6ba7.exe	28
PID 1300 wrote to memory of 2264	1300	79904e777233bb1b3d2a2023e28d6ba7.exe	28
PID 1300 wrote to memory of 2264	1300	79904e777233bb1b3d2a2023e28d6ba7.exe	28
PID 1300 wrote to memory of 2264	1300	79904e777233bb1b3d2a2023e28d6ba7.exe	28
PID 1300 wrote to memory of 2264	1300	79904e777233bb1b3d2a2023e28d6ba7.exe	28
PID 1300 wrote to memory of 2264	1300	79904e777233bb1b3d2a2023e28d6ba7.exe	28
PID 1300 wrote to memory of 2264	1300	79904e777233bb1b3d2a2023e28d6ba7.exe	28
PID 2264 wrote to memory of 3040	2264	79904e777233bb1b3d2a2023e28d6ba7.exe	29
PID 2264 wrote to memory of 3040	2264	79904e777233bb1b3d2a2023e28d6ba7.exe	29
PID 2264 wrote to memory of 3040	2264	79904e777233bb1b3d2a2023e28d6ba7.exe	29
PID 2264 wrote to memory of 3040	2264	79904e777233bb1b3d2a2023e28d6ba7.exe	29

memory/2264-2-0x0000000000400000-0x0000000000405000-memory.dmp

Filesize
20KB

Download
memory/2264-4-0x0000000000400000-0x0000000000405000-memory.dmp

Filesize
20KB

Download
memory/2264-5-0x0000000000400000-0x0000000000405000-memory.dmp

Filesize
20KB

Download