db7e501eadc297e07d861f25eb315b851a70bc814bacfa03058c702cc4359178

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
24/02/2024, 03:33

Target

a0d6afe3701e8808e6583e3382715a6f.exe
Size

476KB
MD5

a0d6afe3701e8808e6583e3382715a6f
SHA1

8a0ce8cc03cea4d122039fc62728df9470745574
SHA256

db7e501eadc297e07d861f25eb315b851a70bc814bacfa03058c702cc4359178
SHA512

a39a6af6f721090fd36af96c15557d179bb2d54d1928625296f637efb4546bf0d152d91f236d4f9f90285a99b7f96312eab141bb874fdc78189936ffb95d8037
SSDEEP

6144:IJZv5zFiIOq4gJWlPz5pdO0G3JxKxCYEDdzW02xkv4h:SLFgO0jCY8zW02xGO

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 332 set thread context of 1776	332	a0d6afe3701e8808e6583e3382715a6f.exe	28

Suspicious use of WriteProcessMemory 9 IoCs

description	pid	Process	procid_target
PID 332 wrote to memory of 1776	332	a0d6afe3701e8808e6583e3382715a6f.exe	28
PID 332 wrote to memory of 1776	332	a0d6afe3701e8808e6583e3382715a6f.exe	28
PID 332 wrote to memory of 1776	332	a0d6afe3701e8808e6583e3382715a6f.exe	28
PID 332 wrote to memory of 1776	332	a0d6afe3701e8808e6583e3382715a6f.exe	28
PID 332 wrote to memory of 1776	332	a0d6afe3701e8808e6583e3382715a6f.exe	28
PID 332 wrote to memory of 1776	332	a0d6afe3701e8808e6583e3382715a6f.exe	28
PID 332 wrote to memory of 1776	332	a0d6afe3701e8808e6583e3382715a6f.exe	28
PID 332 wrote to memory of 1776	332	a0d6afe3701e8808e6583e3382715a6f.exe	28
PID 332 wrote to memory of 1776	332	a0d6afe3701e8808e6583e3382715a6f.exe	28

C:\Users\Admin\AppData\Local\Temp\a0d6afe3701e8808e6583e3382715a6f.exe
"C:\Users\Admin\AppData\Local\Temp\a0d6afe3701e8808e6583e3382715a6f.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:332
- C:\Users\Admin\AppData\Local\Temp\a0d6afe3701e8808e6583e3382715a6f.exe
  "C:\Users\Admin\AppData\Local\Temp\a0d6afe3701e8808e6583e3382715a6f.exe"
  2⤵
  PID:1776

memory/1776-0-0x0000000000400000-0x0000000000431000-memory.dmp

Filesize
196KB

Download
memory/1776-2-0x0000000000400000-0x0000000000431000-memory.dmp

Filesize
196KB

Download
memory/1776-4-0x0000000000400000-0x0000000000431000-memory.dmp

Filesize
196KB

Download
memory/1776-6-0x0000000000400000-0x0000000000431000-memory.dmp

Filesize
196KB

Download
memory/1776-8-0x0000000000400000-0x0000000000431000-memory.dmp

Filesize
196KB

Download
memory/1776-10-0x0000000000400000-0x0000000000431000-memory.dmp

Filesize
196KB

Download
memory/1776-12-0x0000000000400000-0x0000000000431000-memory.dmp

Filesize
196KB

Download
memory/1776-13-0x0000000000400000-0x0000000000431000-memory.dmp

Filesize
196KB

Download
memory/1776-14-0x0000000000400000-0x0000000000431000-memory.dmp

Filesize
196KB

Download