5e7609e3016eb92f0c1c4118a0c5c2bcb74a09ba5b7d6f75db68970119683799

Analysis

max time kernel
117s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
24-02-2024 20:42

Target

a2b5bbf1fa19160f671de980c71458b9.exe
Size

368KB
MD5

a2b5bbf1fa19160f671de980c71458b9
SHA1

e000a468a5c029ac156bc483668ddf15e1b5c198
SHA256

5e7609e3016eb92f0c1c4118a0c5c2bcb74a09ba5b7d6f75db68970119683799
SHA512

56bf1fa652ceb6f6366c66546d42d89926f72f12f97353bf7309c24a1fd0c240f868b84342c5624bc734bf524db75e853483047ec93339821205e72e7f45f2cd
SSDEEP

6144:d8cL5nzdHT6Z1iV26cqG9xWjXbH63/HmhN3GlFblOS:bRzZTSR6zWxK+PAN2BOS

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 612 set thread context of 1116	612	a2b5bbf1fa19160f671de980c71458b9.exe	28

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1972	1116	WerFault.exe	28

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 612 wrote to memory of 1116	612	a2b5bbf1fa19160f671de980c71458b9.exe	28
PID 612 wrote to memory of 1116	612	a2b5bbf1fa19160f671de980c71458b9.exe	28
PID 612 wrote to memory of 1116	612	a2b5bbf1fa19160f671de980c71458b9.exe	28
PID 612 wrote to memory of 1116	612	a2b5bbf1fa19160f671de980c71458b9.exe	28
PID 612 wrote to memory of 1116	612	a2b5bbf1fa19160f671de980c71458b9.exe	28
PID 612 wrote to memory of 1116	612	a2b5bbf1fa19160f671de980c71458b9.exe	28
PID 1116 wrote to memory of 1972	1116	a2b5bbf1fa19160f671de980c71458b9.exe	29
PID 1116 wrote to memory of 1972	1116	a2b5bbf1fa19160f671de980c71458b9.exe	29
PID 1116 wrote to memory of 1972	1116	a2b5bbf1fa19160f671de980c71458b9.exe	29
PID 1116 wrote to memory of 1972	1116	a2b5bbf1fa19160f671de980c71458b9.exe	29

memory/612-0-0x0000000063400000-0x000000006345F000-memory.dmp

Filesize
380KB

Download
memory/612-1-0x0000000000220000-0x0000000000221000-memory.dmp

Filesize
4KB

Download
memory/612-7-0x0000000063400000-0x000000006345F000-memory.dmp

Filesize
380KB

Download
memory/1116-2-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/1116-3-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/1116-5-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/1116-6-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/1116-9-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download