84be47f95a3422f33b93fa9549b916885ff113258f21c13aa2ffbab7aea5cfd4

Analysis

max time kernel
1764s
max time network
1179s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
24/02/2024, 16:21

Target

CupFixer.exe
Size

8.7MB
MD5

1f2ef76d1e445de858ded5a0b2834630
SHA1

03d0bdfbfc8069fc057e5c70a2a9d0e8a37c5576
SHA256

84be47f95a3422f33b93fa9549b916885ff113258f21c13aa2ffbab7aea5cfd4
SHA512

ffc92eadbb7469c86c6087bdb41a5767bd138ad76123b03acecf19e2a95cc4456e4ef39719dd2df45b365e1eac1c252b7a8254fb2db691674a26c68a57b58eda
SSDEEP

196608:XUJlpPbv3H6bESgmATk/Pesw3ixXnhoy42CHo9g8BmOxxZrYPBNFYIX:XUJPebpgmATkcIXKH2oo9g8IOxxW3e

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
2660	CupFixer.exe
2660	CupFixer.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 2660 wrote to memory of 4820	2660	CupFixer.exe	87
PID 2660 wrote to memory of 4820	2660	CupFixer.exe	87

C:\Users\Admin\AppData\Local\Temp\CupFixer.exe
"C:\Users\Admin\AppData\Local\Temp\CupFixer.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2660
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cls
  2⤵
  PID:4820

memory/2660-0-0x00007FF65E080000-0x00007FF660E5D000-memory.dmp

Filesize
45.9MB

Download
memory/2660-1-0x00007FF4C2D20000-0x00007FF4C30F1000-memory.dmp

Filesize
3.8MB

Download
memory/2660-3-0x00007FF65E080000-0x00007FF660E5D000-memory.dmp

Filesize
45.9MB

Download
memory/2660-4-0x00007FF65E080000-0x00007FF660E5D000-memory.dmp

Filesize
45.9MB

Download
memory/2660-5-0x00007FF65E080000-0x00007FF660E5D000-memory.dmp

Filesize
45.9MB

Download
memory/2660-6-0x00007FF65E080000-0x00007FF660E5D000-memory.dmp

Filesize
45.9MB

Download
memory/2660-7-0x00007FFAE75B0000-0x00007FFAE77A5000-memory.dmp

Filesize
2.0MB

Download
memory/2660-8-0x00007FFA677B0000-0x00007FFA677C0000-memory.dmp

Filesize
64KB

Download
memory/2660-9-0x00007FFAE5B40000-0x00007FFAE5B50000-memory.dmp

Filesize
64KB

Download
memory/2660-10-0x00007FF65E080000-0x00007FF660E5D000-memory.dmp

Filesize
45.9MB

Download
memory/2660-11-0x00007FF4C2D20000-0x00007FF4C30F1000-memory.dmp

Filesize
3.8MB

Download
memory/2660-12-0x00007FFAE75B0000-0x00007FFAE77A5000-memory.dmp

Filesize
2.0MB

Download