92cbb7ff082676dae018d6bf7aa23bd8ca8b454f5b9b4dd1a9f8c17cd28543c3

Analysis

max time kernel
118s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
28/01/2024, 12:31

Target

7d22d536b3a870ef92148baf05463375.exe
Size

23KB
MD5

7d22d536b3a870ef92148baf05463375
SHA1

c15aff0223808ed26e1a8b891ff62ddb57747b61
SHA256

92cbb7ff082676dae018d6bf7aa23bd8ca8b454f5b9b4dd1a9f8c17cd28543c3
SHA512

77df631a7229ad7af4de229c1b5f5f31ba2bb184639e5aa9682b185710abf5f1d62f5a6a4dd41d82bb2bcb76656201457596a5c4b6c00e62d0428bb16f68c73d
SSDEEP

384:7aHRhj9tsfwoN+O6CBYppDRwrPIMZynZeKD9LYPG+4Hu6QItEstebLOY:4tqf6Ppp9w6ZVD9Lk4Hu6QOEstAOY

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1964 set thread context of 1660	1964	7d22d536b3a870ef92148baf05463375.exe	28

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1964	7d22d536b3a870ef92148baf05463375.exe
1964	7d22d536b3a870ef92148baf05463375.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 1964 wrote to memory of 1660	1964	7d22d536b3a870ef92148baf05463375.exe	28
PID 1964 wrote to memory of 1660	1964	7d22d536b3a870ef92148baf05463375.exe	28
PID 1964 wrote to memory of 1660	1964	7d22d536b3a870ef92148baf05463375.exe	28
PID 1964 wrote to memory of 1660	1964	7d22d536b3a870ef92148baf05463375.exe	28
PID 1964 wrote to memory of 1660	1964	7d22d536b3a870ef92148baf05463375.exe	28
PID 1964 wrote to memory of 1660	1964	7d22d536b3a870ef92148baf05463375.exe	28

C:\Users\Admin\AppData\Local\Temp\7d22d536b3a870ef92148baf05463375.exe
"C:\Users\Admin\AppData\Local\Temp\7d22d536b3a870ef92148baf05463375.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1964
- C:\Windows\SysWOW64\mspaint.exe
  C:\Users\Admin\AppData\Local\Temp\7d22d536b3a870ef92148baf05463375.exe
  2⤵
  PID:1660

memory/1660-0-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/1660-2-0x0000000000400000-0x0000000000415000-memory.dmp

Filesize
84KB

Download
memory/1660-4-0x0000000000400000-0x0000000000415000-memory.dmp

Filesize
84KB

Download