8dda91f8a3e7f9095f8fb82485ff42e1a90ca6c5c66aab903750a72f49db72e9

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
12/02/2024, 12:42

Target

972d84b3316fe72375fc9e653bc4dfc0.exe
Size

295KB
MD5

972d84b3316fe72375fc9e653bc4dfc0
SHA1

80472aaa6ec760be6890fa0a39edac1ec5777ffe
SHA256

8dda91f8a3e7f9095f8fb82485ff42e1a90ca6c5c66aab903750a72f49db72e9
SHA512

38f6e4457c5f8cc1e1c9892c4ab219c36d55626318c930154652040757406dd9c2037613af1e8dbeba4d9a408cb67396c87a8be5f9a14c19315e5e3460bba4e6
SSDEEP

6144:Oozt6+mrdSWQPvkRr2NPQ4Hk8cQ4er5W1L:P2QPvQSBHE8cark1

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1792 set thread context of 2204	1792	972d84b3316fe72375fc9e653bc4dfc0.exe	28

Suspicious use of WriteProcessMemory 9 IoCs

description	pid	Process	procid_target
PID 1792 wrote to memory of 2204	1792	972d84b3316fe72375fc9e653bc4dfc0.exe	28
PID 1792 wrote to memory of 2204	1792	972d84b3316fe72375fc9e653bc4dfc0.exe	28
PID 1792 wrote to memory of 2204	1792	972d84b3316fe72375fc9e653bc4dfc0.exe	28
PID 1792 wrote to memory of 2204	1792	972d84b3316fe72375fc9e653bc4dfc0.exe	28
PID 1792 wrote to memory of 2204	1792	972d84b3316fe72375fc9e653bc4dfc0.exe	28
PID 1792 wrote to memory of 2204	1792	972d84b3316fe72375fc9e653bc4dfc0.exe	28
PID 1792 wrote to memory of 2204	1792	972d84b3316fe72375fc9e653bc4dfc0.exe	28
PID 1792 wrote to memory of 2204	1792	972d84b3316fe72375fc9e653bc4dfc0.exe	28
PID 1792 wrote to memory of 2204	1792	972d84b3316fe72375fc9e653bc4dfc0.exe	28

C:\Users\Admin\AppData\Local\Temp\972d84b3316fe72375fc9e653bc4dfc0.exe
"C:\Users\Admin\AppData\Local\Temp\972d84b3316fe72375fc9e653bc4dfc0.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:1792
- C:\Users\Admin\AppData\Local\Temp\972d84b3316fe72375fc9e653bc4dfc0.exe
  C:\Users\Admin\AppData\Local\Temp\972d84b3316fe72375fc9e653bc4dfc0.exe
  2⤵
  PID:2204

memory/1792-0-0x0000000000230000-0x000000000024A000-memory.dmp

Filesize
104KB

Download
memory/1792-1-0x0000000074490000-0x0000000074B7E000-memory.dmp

Filesize
6.9MB

Download
memory/1792-2-0x0000000004C50000-0x0000000004C90000-memory.dmp

Filesize
256KB

Download
memory/1792-13-0x0000000074490000-0x0000000074B7E000-memory.dmp

Filesize
6.9MB

Download
memory/2204-5-0x0000000000400000-0x000000000042C000-memory.dmp

Filesize
176KB

Download
memory/2204-7-0x0000000000400000-0x000000000042C000-memory.dmp

Filesize
176KB

Download
memory/2204-3-0x0000000000400000-0x000000000042C000-memory.dmp

Filesize
176KB

Download
memory/2204-11-0x0000000000400000-0x000000000042C000-memory.dmp

Filesize
176KB

Download
memory/2204-9-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2204-8-0x0000000000400000-0x000000000042C000-memory.dmp

Filesize
176KB

Download