Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
13/02/2024, 19:38
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
99f5f3fea5235a689f0420d6be2ca72b.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
99f5f3fea5235a689f0420d6be2ca72b.exe
Resource
win10v2004-20231215-en
3 signatures
150 seconds
General
-
Target
99f5f3fea5235a689f0420d6be2ca72b.exe
-
Size
443KB
-
MD5
99f5f3fea5235a689f0420d6be2ca72b
-
SHA1
016c8cd757d8b2ef6525bd4da5332566d95a0d15
-
SHA256
1a27f79e136dcf403bb71babaa451996c96ec8f542d1967935cc614ff799ac81
-
SHA512
a74f3924e6de57e9f5b738636c1de890a42572f60e98c216f231c9208f703959add118e780d778068afa632bb1f20943ebe8c6e1ff85875b321ea437b490790c
-
SSDEEP
12288:cyp284UGhoWoQEF3Z4mxxU2U1N55vplUqBV:cyDQmXTUFJpzV
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
description pid Process procid_target PID 2256 set thread context of 1996 2256 99f5f3fea5235a689f0420d6be2ca72b.exe 28 -
Suspicious use of WriteProcessMemory 6 IoCs
description pid Process procid_target PID 2256 wrote to memory of 1996 2256 99f5f3fea5235a689f0420d6be2ca72b.exe 28 PID 2256 wrote to memory of 1996 2256 99f5f3fea5235a689f0420d6be2ca72b.exe 28 PID 2256 wrote to memory of 1996 2256 99f5f3fea5235a689f0420d6be2ca72b.exe 28 PID 2256 wrote to memory of 1996 2256 99f5f3fea5235a689f0420d6be2ca72b.exe 28 PID 2256 wrote to memory of 1996 2256 99f5f3fea5235a689f0420d6be2ca72b.exe 28 PID 2256 wrote to memory of 1996 2256 99f5f3fea5235a689f0420d6be2ca72b.exe 28
Processes
-
C:\Users\Admin\AppData\Local\Temp\99f5f3fea5235a689f0420d6be2ca72b.exe"C:\Users\Admin\AppData\Local\Temp\99f5f3fea5235a689f0420d6be2ca72b.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:2256 -
C:\Users\Admin\AppData\Local\Temp\99f5f3fea5235a689f0420d6be2ca72b.exeC:\Users\Admin\AppData\Local\Temp\99f5f3fea5235a689f0420d6be2ca72b.exe2⤵PID:1996
-