3361d8646db858354977b6ee72d7f08a4587a01c38d36918c758ca813af96530

Analysis

max time kernel
141s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
13/02/2024, 02:11

Target

3361d8646db858354977b6ee72d7f08a4587a01c38d36918c758ca813af96530.exe
Size

724KB
MD5

451519b7c06e19ee6e1fb67d25c94ccc
SHA1

c48c57febb2b7fca4141aa08185dc52283605c53
SHA256

3361d8646db858354977b6ee72d7f08a4587a01c38d36918c758ca813af96530
SHA512

0ef0602d5b25b9d3a49324b82cec6a3371df91232c33017654264001c981ced6fa2992180fbeca05f12c432f1a9a9fb525ea8dde66a578b42692f6799d833fbb
SSDEEP

12288:dHjk/w3g/b1oru+TLYwZl3xGLLXH5CgMFXiUaFybeL5OpEKp8LKzZlEe:dhQT6rrTLZ3xGLLXH5BucybeL5OpEKpz

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 3340 set thread context of 3396	3340	3361d8646db858354977b6ee72d7f08a4587a01c38d36918c758ca813af96530.exe	94

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3340 wrote to memory of 3396	3340	3361d8646db858354977b6ee72d7f08a4587a01c38d36918c758ca813af96530.exe	94
PID 3340 wrote to memory of 3396	3340	3361d8646db858354977b6ee72d7f08a4587a01c38d36918c758ca813af96530.exe	94
PID 3340 wrote to memory of 3396	3340	3361d8646db858354977b6ee72d7f08a4587a01c38d36918c758ca813af96530.exe	94

C:\Users\Admin\AppData\Local\Temp\3361d8646db858354977b6ee72d7f08a4587a01c38d36918c758ca813af96530.exe
"C:\Users\Admin\AppData\Local\Temp\3361d8646db858354977b6ee72d7f08a4587a01c38d36918c758ca813af96530.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:3340
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exe
  C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exe
  2⤵
  PID:3396

memory/3340-0-0x0000000000210000-0x00000000002CA000-memory.dmp

Filesize
744KB

Download
memory/3340-1-0x00007FF944EA0000-0x00007FF945961000-memory.dmp

Filesize
10.8MB

Download
memory/3340-2-0x000000001BED0000-0x000000001BEE0000-memory.dmp

Filesize
64KB

Download
memory/3340-3-0x000000001E900000-0x000000001E91A000-memory.dmp

Filesize
104KB

Download
memory/3340-4-0x0000000002D30000-0x0000000002D42000-memory.dmp

Filesize
72KB

Download
memory/3340-5-0x0000000002D60000-0x0000000002D70000-memory.dmp

Filesize
64KB

Download
memory/3340-6-0x000000001E920000-0x000000001E9AA000-memory.dmp

Filesize
552KB

Download
memory/3340-9-0x00007FF944EA0000-0x00007FF945961000-memory.dmp

Filesize
10.8MB

Download