6efc45edc32cd41b2ed0d0f8d46554355419952f988df7279b690da9ca6333de

Analysis

max time kernel
142s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
25/02/2024, 05:41

Target

a307b90d333dd7554a1f3ae19e0dada8.exe
Size

75KB
MD5

a307b90d333dd7554a1f3ae19e0dada8
SHA1

b10259919a1051eb2df9038465d161549370a721
SHA256

6efc45edc32cd41b2ed0d0f8d46554355419952f988df7279b690da9ca6333de
SHA512

169f981ac7a7c81f23358f9a88a8f8ec1954cb33c48657fbc1a9910d5ebc2f5614a435c2da3fe516835bf450de640397d1ace62c991b5d3d07366c16a33dc13f
SSDEEP

1536:/ZHvTxLWHLdjKGM0yv4D7eZrMLnTNblx/l8KIdEi6m5uF19j23ru0EJgs:RPtAOvsgcTNh3jRij+19Q21

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2528 set thread context of 976	2528	a307b90d333dd7554a1f3ae19e0dada8.exe	86

Suspicious behavior: EnumeratesProcesses 4 IoCs

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2528	a307b90d333dd7554a1f3ae19e0dada8.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2528 wrote to memory of 976	2528	a307b90d333dd7554a1f3ae19e0dada8.exe	86
PID 2528 wrote to memory of 976	2528	a307b90d333dd7554a1f3ae19e0dada8.exe	86
PID 2528 wrote to memory of 976	2528	a307b90d333dd7554a1f3ae19e0dada8.exe	86
PID 2528 wrote to memory of 976	2528	a307b90d333dd7554a1f3ae19e0dada8.exe	86
PID 2528 wrote to memory of 976	2528	a307b90d333dd7554a1f3ae19e0dada8.exe	86
PID 2528 wrote to memory of 976	2528	a307b90d333dd7554a1f3ae19e0dada8.exe	86
PID 2528 wrote to memory of 976	2528	a307b90d333dd7554a1f3ae19e0dada8.exe	86
PID 976 wrote to memory of 3408	976	a307b90d333dd7554a1f3ae19e0dada8.exe	55
PID 976 wrote to memory of 3408	976	a307b90d333dd7554a1f3ae19e0dada8.exe	55
PID 976 wrote to memory of 3408	976	a307b90d333dd7554a1f3ae19e0dada8.exe	55
PID 976 wrote to memory of 3408	976	a307b90d333dd7554a1f3ae19e0dada8.exe	55

memory/976-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/976-4-0x0000000000400000-0x00000000004083A0-memory.dmp

Filesize
32KB

Download
memory/976-6-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/976-7-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/976-9-0x0000000010000000-0x0000000010012000-memory.dmp

Filesize
72KB

Download
memory/976-14-0x0000000000410000-0x00000000004D9000-memory.dmp

Filesize
804KB

Download
memory/976-15-0x0000000000400000-0x00000000004083A0-memory.dmp

Filesize
32KB

Download
memory/976-16-0x0000000010000000-0x0000000010012000-memory.dmp

Filesize
72KB

Download
memory/2528-0-0x0000000000400000-0x0000000000432000-memory.dmp

Filesize
200KB

Download
memory/2528-8-0x0000000000400000-0x0000000000432000-memory.dmp

Filesize
200KB

Download
memory/3408-10-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/3408-11-0x000000007FFD0000-0x000000007FFD1000-memory.dmp

Filesize
4KB

Download