4ebebb5318c1dde3462ad1024b60d868ec3667099dab1577fa74c568c0d92bc6

Analysis

max time kernel
90s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
20-02-2024 06:15

Target

file.exe
Size

2.4MB
MD5

3f039289f2dfb1a6af7e1affff9f9354
SHA1

21b92165dd73f5351a0481fa7811f6149ba4be18
SHA256

4ebebb5318c1dde3462ad1024b60d868ec3667099dab1577fa74c568c0d92bc6
SHA512

061804068e59aba314e3f663b695b07d623085d80bdea82278b78cb5bbceee44ef3a68baf2997863bbf772636230bafcbb7a963c76658ef7468703eccdac1cf7
SSDEEP

49152:PkQTAsQ8XADM8dDGbMtR8ugY+UsFS7z1BQ8zDUtemAavNgX:Pas3ohwbw8MlQk1y8KBgX

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 4204 set thread context of 1580	4204	file.exe	85

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3200	1580	WerFault.exe	85

Suspicious use of WriteProcessMemory 12 IoCs

description	pid	Process	procid_target
PID 4204 wrote to memory of 1580	4204	file.exe	85
PID 4204 wrote to memory of 1580	4204	file.exe	85
PID 4204 wrote to memory of 1580	4204	file.exe	85
PID 4204 wrote to memory of 1580	4204	file.exe	85
PID 4204 wrote to memory of 1580	4204	file.exe	85
PID 4204 wrote to memory of 1580	4204	file.exe	85
PID 4204 wrote to memory of 1580	4204	file.exe	85
PID 4204 wrote to memory of 1580	4204	file.exe	85
PID 4204 wrote to memory of 1580	4204	file.exe	85
PID 4204 wrote to memory of 1580	4204	file.exe	85
PID 4204 wrote to memory of 1580	4204	file.exe	85
PID 4204 wrote to memory of 1580	4204	file.exe	85

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1580 -ip 1580
1⤵
PID:812

memory/1580-7-0x0000000000400000-0x000000000085D000-memory.dmp

Filesize
4.4MB

Download
memory/1580-10-0x0000000000400000-0x000000000085D000-memory.dmp

Filesize
4.4MB

Download
memory/1580-14-0x0000000000400000-0x000000000085D000-memory.dmp

Filesize
4.4MB

Download
memory/4204-1-0x0000000074BB0000-0x0000000075360000-memory.dmp

Filesize
7.7MB

Download
memory/4204-0-0x0000000005410000-0x000000000565A000-memory.dmp

Filesize
2.3MB

Download
memory/4204-2-0x0000000002500000-0x0000000002510000-memory.dmp

Filesize
64KB

Download
memory/4204-3-0x0000000005660000-0x0000000005C04000-memory.dmp

Filesize
5.6MB

Download
memory/4204-4-0x00000000051C0000-0x0000000005408000-memory.dmp

Filesize
2.3MB

Download
memory/4204-13-0x0000000002E80000-0x0000000004E80000-memory.dmp

Filesize
32.0MB

Download
memory/4204-15-0x0000000074BB0000-0x0000000075360000-memory.dmp

Filesize
7.7MB

Download