66995f3135795aaf96d692ae58bafd0290f5448ea774266c47d6c2b3d018c8f1

Analysis

max time kernel
143s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
05-03-2024 21:18

Target

66995f3135795aaf96d692ae58bafd0290f5448ea774266c47d6c2b3d018c8f1.exe
Size

188KB
MD5

dcf02d18a752e65b0f1bb0d0bb1dcaf8
SHA1

38340363cfd4d6b8f1873b9ab5fb11055d7abe1a
SHA256

66995f3135795aaf96d692ae58bafd0290f5448ea774266c47d6c2b3d018c8f1
SHA512

600a0b690c13a10c36cec3602abd3203fa77897491ffaf05620e266b5af96bdb8ac1248332d5ab5c71797522c34004ec84c78ae59f5cea3aa0ae133ce3b63d2d
SSDEEP

3072:dnfr6W97WHcezyW53pkApPxRFTzb+lIw/dXl6jCbYAavVx8as:5OW97fBW53RXGlIWtlsCbDavO

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 3028 set thread context of 1588	3028	66995f3135795aaf96d692ae58bafd0290f5448ea774266c47d6c2b3d018c8f1.exe	88

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3028	66995f3135795aaf96d692ae58bafd0290f5448ea774266c47d6c2b3d018c8f1.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 3028 wrote to memory of 1588	3028	66995f3135795aaf96d692ae58bafd0290f5448ea774266c47d6c2b3d018c8f1.exe	88
PID 3028 wrote to memory of 1588	3028	66995f3135795aaf96d692ae58bafd0290f5448ea774266c47d6c2b3d018c8f1.exe	88
PID 3028 wrote to memory of 1588	3028	66995f3135795aaf96d692ae58bafd0290f5448ea774266c47d6c2b3d018c8f1.exe	88
PID 3028 wrote to memory of 1588	3028	66995f3135795aaf96d692ae58bafd0290f5448ea774266c47d6c2b3d018c8f1.exe	88
PID 3028 wrote to memory of 1588	3028	66995f3135795aaf96d692ae58bafd0290f5448ea774266c47d6c2b3d018c8f1.exe	88
PID 3028 wrote to memory of 1588	3028	66995f3135795aaf96d692ae58bafd0290f5448ea774266c47d6c2b3d018c8f1.exe	88
PID 3028 wrote to memory of 1588	3028	66995f3135795aaf96d692ae58bafd0290f5448ea774266c47d6c2b3d018c8f1.exe	88
PID 3028 wrote to memory of 1588	3028	66995f3135795aaf96d692ae58bafd0290f5448ea774266c47d6c2b3d018c8f1.exe	88
PID 3028 wrote to memory of 1588	3028	66995f3135795aaf96d692ae58bafd0290f5448ea774266c47d6c2b3d018c8f1.exe	88
PID 1588 wrote to memory of 3560	1588	66995f3135795aaf96d692ae58bafd0290f5448ea774266c47d6c2b3d018c8f1.exe	57
PID 1588 wrote to memory of 3560	1588	66995f3135795aaf96d692ae58bafd0290f5448ea774266c47d6c2b3d018c8f1.exe	57

memory/1588-2-0x0000000000400000-0x0000000000416000-memory.dmp

Filesize
88KB

Download
memory/1588-3-0x0000000000400000-0x0000000000416000-memory.dmp

Filesize
88KB

Download
memory/1588-4-0x0000000000400000-0x0000000000416000-memory.dmp

Filesize
88KB

Download
memory/1588-5-0x0000000000400000-0x0000000000416000-memory.dmp

Filesize
88KB

Download