30bf6454376a8f98b06073ce40aa031a1d140aedbae63cf2a9207b093871c60a

Analysis

max time kernel
142s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
12/02/2024, 23:32

Target

97e6df19d56ae0ea8637a06906fbada4.exe
Size

333KB
MD5

97e6df19d56ae0ea8637a06906fbada4
SHA1

f1a62c4b3d19bfd52531455266908606562697c2
SHA256

30bf6454376a8f98b06073ce40aa031a1d140aedbae63cf2a9207b093871c60a
SHA512

2c9b407a00ff464d93b7f0a684fca274c3501bba115500b7900b2f0458d37f2af4eb4a0a07d2af695a966eec61aaab07aa447297d125be1eb0d7c260855c6762
SSDEEP

6144:2gfeN1MeWJmucextjTwWKe9gCA/Tyj+knm:TCMZJmzefWT9mqkm

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1484 set thread context of 4504	1484	97e6df19d56ae0ea8637a06906fbada4.exe	86

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 1484 wrote to memory of 4504	1484	97e6df19d56ae0ea8637a06906fbada4.exe	86
PID 1484 wrote to memory of 4504	1484	97e6df19d56ae0ea8637a06906fbada4.exe	86
PID 1484 wrote to memory of 4504	1484	97e6df19d56ae0ea8637a06906fbada4.exe	86
PID 1484 wrote to memory of 4504	1484	97e6df19d56ae0ea8637a06906fbada4.exe	86
PID 1484 wrote to memory of 4504	1484	97e6df19d56ae0ea8637a06906fbada4.exe	86
PID 1484 wrote to memory of 4504	1484	97e6df19d56ae0ea8637a06906fbada4.exe	86
PID 1484 wrote to memory of 4504	1484	97e6df19d56ae0ea8637a06906fbada4.exe	86
PID 1484 wrote to memory of 4504	1484	97e6df19d56ae0ea8637a06906fbada4.exe	86

C:\Users\Admin\AppData\Local\Temp\97e6df19d56ae0ea8637a06906fbada4.exe
"C:\Users\Admin\AppData\Local\Temp\97e6df19d56ae0ea8637a06906fbada4.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:1484
- C:\Users\Admin\AppData\Local\Temp\97e6df19d56ae0ea8637a06906fbada4.exe
  "C:\Users\Admin\AppData\Local\Temp\97e6df19d56ae0ea8637a06906fbada4.exe"
  2⤵
  PID:4504

memory/1484-0-0x0000000000400000-0x0000000000458000-memory.dmp

Filesize
352KB

Download
memory/1484-2-0x0000000000400000-0x0000000000458000-memory.dmp

Filesize
352KB

Download
memory/4504-1-0x0000000000400000-0x0000000000444000-memory.dmp

Filesize
272KB

Download
memory/4504-4-0x0000000000400000-0x0000000000444000-memory.dmp

Filesize
272KB

Download
memory/4504-5-0x0000000000400000-0x0000000000444000-memory.dmp

Filesize
272KB

Download
memory/4504-6-0x0000000000400000-0x0000000000444000-memory.dmp

Filesize
272KB

Download