3361d8646db858354977b6ee72d7f08a4587a01c38d36918c758ca813af96530

Analysis

max time kernel
121s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
13/02/2024, 02:11

Target

3361d8646db858354977b6ee72d7f08a4587a01c38d36918c758ca813af96530.exe
Size

724KB
MD5

451519b7c06e19ee6e1fb67d25c94ccc
SHA1

c48c57febb2b7fca4141aa08185dc52283605c53
SHA256

3361d8646db858354977b6ee72d7f08a4587a01c38d36918c758ca813af96530
SHA512

0ef0602d5b25b9d3a49324b82cec6a3371df91232c33017654264001c981ced6fa2992180fbeca05f12c432f1a9a9fb525ea8dde66a578b42692f6799d833fbb
SSDEEP

12288:dHjk/w3g/b1oru+TLYwZl3xGLLXH5CgMFXiUaFybeL5OpEKp8LKzZlEe:dhQT6rrTLZ3xGLLXH5BucybeL5OpEKpz

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2272 set thread context of 2728	2272	3361d8646db858354977b6ee72d7f08a4587a01c38d36918c758ca813af96530.exe	28

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2272 wrote to memory of 2728	2272	3361d8646db858354977b6ee72d7f08a4587a01c38d36918c758ca813af96530.exe	28
PID 2272 wrote to memory of 2728	2272	3361d8646db858354977b6ee72d7f08a4587a01c38d36918c758ca813af96530.exe	28
PID 2272 wrote to memory of 2728	2272	3361d8646db858354977b6ee72d7f08a4587a01c38d36918c758ca813af96530.exe	28
PID 2272 wrote to memory of 2728	2272	3361d8646db858354977b6ee72d7f08a4587a01c38d36918c758ca813af96530.exe	28

C:\Users\Admin\AppData\Local\Temp\3361d8646db858354977b6ee72d7f08a4587a01c38d36918c758ca813af96530.exe
"C:\Users\Admin\AppData\Local\Temp\3361d8646db858354977b6ee72d7f08a4587a01c38d36918c758ca813af96530.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:2272
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exe
  C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exe
  2⤵
  PID:2728

memory/2272-0-0x000000013FFC0000-0x000000014007A000-memory.dmp

Filesize
744KB

Download
memory/2272-1-0x000007FEF5B60000-0x000007FEF654C000-memory.dmp

Filesize
9.9MB

Download
memory/2272-2-0x000000001BD10000-0x000000001BD90000-memory.dmp

Filesize
512KB

Download
memory/2272-3-0x00000000022A0000-0x00000000022BA000-memory.dmp

Filesize
104KB

Download
memory/2272-4-0x0000000002340000-0x0000000002352000-memory.dmp

Filesize
72KB

Download
memory/2272-5-0x0000000002350000-0x0000000002360000-memory.dmp

Filesize
64KB

Download
memory/2272-6-0x000000001B140000-0x000000001B1CA000-memory.dmp

Filesize
552KB

Download
memory/2272-7-0x000007FEF5B60000-0x000007FEF654C000-memory.dmp

Filesize
9.9MB

Download
memory/2272-11-0x000007FEF5B60000-0x000007FEF654C000-memory.dmp

Filesize
9.9MB

Download
memory/2728-8-0x000007FFFFFDB000-0x000007FFFFFDC000-memory.dmp

Filesize
4KB

Download