e11ae51d3cc22f4521d35a54a8cb600a31ea610fbdc55eebfee5468cb6b96d7b

Analysis

max time kernel
138s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
14-02-2024 14:45

Target

9bf3256a9b297d0703614975674c50ac.exe
Size

476KB
MD5

9bf3256a9b297d0703614975674c50ac
SHA1

a860deadaf4f9341984068704e685409385d1b5d
SHA256

e11ae51d3cc22f4521d35a54a8cb600a31ea610fbdc55eebfee5468cb6b96d7b
SHA512

d44be39f7f33901f0295eca7b1d1dfefbb1a6bbb397aa2c531e204b46836a93260a6c15755a7f491f4fafd7c4df2e45b89c95997a987d9a6f0e5e4d77d00f31d
SSDEEP

3072:ocxXwSmJQMva8zFki2kXbcvpoADHIIsXKAQ8fWd6v8Maj+aYFtLqpuuQ0mNhU1M:0JZv5zFiIORIX8Maj+aQGuuQvNhU1M

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1596 set thread context of 3188	1596	9bf3256a9b297d0703614975674c50ac.exe	84

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 1596 wrote to memory of 3188	1596	9bf3256a9b297d0703614975674c50ac.exe	84
PID 1596 wrote to memory of 3188	1596	9bf3256a9b297d0703614975674c50ac.exe	84
PID 1596 wrote to memory of 3188	1596	9bf3256a9b297d0703614975674c50ac.exe	84
PID 1596 wrote to memory of 3188	1596	9bf3256a9b297d0703614975674c50ac.exe	84
PID 1596 wrote to memory of 3188	1596	9bf3256a9b297d0703614975674c50ac.exe	84
PID 1596 wrote to memory of 3188	1596	9bf3256a9b297d0703614975674c50ac.exe	84
PID 1596 wrote to memory of 3188	1596	9bf3256a9b297d0703614975674c50ac.exe	84
PID 1596 wrote to memory of 3188	1596	9bf3256a9b297d0703614975674c50ac.exe	84

C:\Users\Admin\AppData\Local\Temp\9bf3256a9b297d0703614975674c50ac.exe
"C:\Users\Admin\AppData\Local\Temp\9bf3256a9b297d0703614975674c50ac.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:1596
- C:\Users\Admin\AppData\Local\Temp\9bf3256a9b297d0703614975674c50ac.exe
  "C:\Users\Admin\AppData\Local\Temp\9bf3256a9b297d0703614975674c50ac.exe"
  2⤵
  PID:3188

memory/3188-0-0x0000000000400000-0x0000000000431000-memory.dmp

Filesize
196KB

Download
memory/3188-2-0x0000000000400000-0x0000000000431000-memory.dmp

Filesize
196KB

Download
memory/3188-3-0x0000000000400000-0x0000000000431000-memory.dmp

Filesize
196KB

Download
memory/3188-4-0x0000000000400000-0x0000000000431000-memory.dmp

Filesize
196KB

Download