668986d1603a9fc8eece7d37b510d42ae96333c6402f4736ee67b5bf0b9b243c

Analysis

max time kernel
120s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
28-02-2024 11:53

Target

abd200ac5233377aad58b4a88640694d.exe
Size

79KB
MD5

abd200ac5233377aad58b4a88640694d
SHA1

502525d8485f29318b9d5f7398b555172bbfe47b
SHA256

668986d1603a9fc8eece7d37b510d42ae96333c6402f4736ee67b5bf0b9b243c
SHA512

bc7fe997df29e548d78ead9e7b965b104f4dd51087538b94055a29f94ec46887d3093f8c3c0c4a0b9b752fdaa92667932dbb7da6d5bd8d113566da1c807b7d1e
SSDEEP

1536:Y8gtRHFbMfJ0qO/cRApm1kTYXEb8uyPG29zHW7u+M:vEFb+J05/+ApLs0bOPG2VHW7u5

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 3024 set thread context of 2136	3024	abd200ac5233377aad58b4a88640694d.exe	28

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2136	abd200ac5233377aad58b4a88640694d.exe
2136	abd200ac5233377aad58b4a88640694d.exe

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 3024 wrote to memory of 2136	3024	abd200ac5233377aad58b4a88640694d.exe	28
PID 3024 wrote to memory of 2136	3024	abd200ac5233377aad58b4a88640694d.exe	28
PID 3024 wrote to memory of 2136	3024	abd200ac5233377aad58b4a88640694d.exe	28
PID 3024 wrote to memory of 2136	3024	abd200ac5233377aad58b4a88640694d.exe	28
PID 3024 wrote to memory of 2136	3024	abd200ac5233377aad58b4a88640694d.exe	28
PID 3024 wrote to memory of 2136	3024	abd200ac5233377aad58b4a88640694d.exe	28
PID 2136 wrote to memory of 1244	2136	abd200ac5233377aad58b4a88640694d.exe	16
PID 2136 wrote to memory of 1244	2136	abd200ac5233377aad58b4a88640694d.exe	16
PID 2136 wrote to memory of 1244	2136	abd200ac5233377aad58b4a88640694d.exe	16
PID 2136 wrote to memory of 1244	2136	abd200ac5233377aad58b4a88640694d.exe	16

memory/1244-4-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/1244-8-0x000000007EFD0000-0x000000007EFD1000-memory.dmp

Filesize
4KB

Download
memory/2136-0-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2136-2-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2136-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2136-7-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/2136-17-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download