0c8c89bd9ad736608407b45960437a7ba8e9654f74ad1bc8cc05660b44d7fdad

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
28/01/2024, 19:08

Target

7dc59989f2d0775bb83c499047a1d626.exe
Size

55KB
MD5

7dc59989f2d0775bb83c499047a1d626
SHA1

a3a9ce3d50e247bf3f9503db3ea921fd027e584d
SHA256

0c8c89bd9ad736608407b45960437a7ba8e9654f74ad1bc8cc05660b44d7fdad
SHA512

db5b6e4fc5dad1ba863beff3d5787095a13521a70414b696514dc9d436310819f18dc50abb32d2866a6ee127bc5764891cd3a113345f7a789063567271b0e4c7
SSDEEP

768:gkw5yeww45SX5wPGuL482mjdiSk9J4cbmCNjE1mkOt1GV6xCkV:gsewhSX5Yg82mQrJdN41mkO/G60kV

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2112 set thread context of 2044	2112	7dc59989f2d0775bb83c499047a1d626.exe	28

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
2044	7dc59989f2d0775bb83c499047a1d626.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2112	7dc59989f2d0775bb83c499047a1d626.exe

Suspicious use of WriteProcessMemory 14 IoCs

description	pid	Process	procid_target
PID 2112 wrote to memory of 2044	2112	7dc59989f2d0775bb83c499047a1d626.exe	28
PID 2112 wrote to memory of 2044	2112	7dc59989f2d0775bb83c499047a1d626.exe	28
PID 2112 wrote to memory of 2044	2112	7dc59989f2d0775bb83c499047a1d626.exe	28
PID 2112 wrote to memory of 2044	2112	7dc59989f2d0775bb83c499047a1d626.exe	28
PID 2112 wrote to memory of 2044	2112	7dc59989f2d0775bb83c499047a1d626.exe	28
PID 2112 wrote to memory of 2044	2112	7dc59989f2d0775bb83c499047a1d626.exe	28
PID 2112 wrote to memory of 2044	2112	7dc59989f2d0775bb83c499047a1d626.exe	28
PID 2112 wrote to memory of 2044	2112	7dc59989f2d0775bb83c499047a1d626.exe	28
PID 2044 wrote to memory of 1220	2044	7dc59989f2d0775bb83c499047a1d626.exe	10
PID 2044 wrote to memory of 1220	2044	7dc59989f2d0775bb83c499047a1d626.exe	10
PID 2044 wrote to memory of 1220	2044	7dc59989f2d0775bb83c499047a1d626.exe	10
PID 2044 wrote to memory of 1220	2044	7dc59989f2d0775bb83c499047a1d626.exe	10
PID 2044 wrote to memory of 1220	2044	7dc59989f2d0775bb83c499047a1d626.exe	10
PID 2044 wrote to memory of 1220	2044	7dc59989f2d0775bb83c499047a1d626.exe	10

memory/1220-14-0x000000007FFF0000-0x000000007FFF1000-memory.dmp

Filesize
4KB

Download
memory/1220-22-0x000000007EFC0000-0x000000007EFC6000-memory.dmp

Filesize
24KB

Download
memory/2044-2-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2044-4-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2044-6-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2044-8-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2044-9-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2044-13-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2044-17-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2044-18-0x0000000010000000-0x0000000010012000-memory.dmp

Filesize
72KB

Download