6ab3a5c5cf64765758eceb241aad5ba0f866f2639daf388a01965d949f417682

Analysis

max time kernel
121s
max time network
129s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
08/03/2024, 11:30

Target

bb2707f9c80ff3c23600c3a611af730e.exe
Size

180KB
MD5

bb2707f9c80ff3c23600c3a611af730e
SHA1

e8f2ed68a7c1c499b37810a24d11e254f5dcb8f8
SHA256

6ab3a5c5cf64765758eceb241aad5ba0f866f2639daf388a01965d949f417682
SHA512

17c241f753c30ecd529e66a33b2d294d68ca868a2309bd1def236c9c2e698074454494356a66fb1ee58700e19d130a1a8a8851e1f2fd47802c01d870e49a5bad
SSDEEP

3072:bqCEUP0Fx0k4MWJjFalEadPFO0c6p866zn/431FZdsALSU/:c1dyU/

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 3052 set thread context of 3068	3052	bb2707f9c80ff3c23600c3a611af730e.exe	28

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3068	bb2707f9c80ff3c23600c3a611af730e.exe
3068	bb2707f9c80ff3c23600c3a611af730e.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3052	bb2707f9c80ff3c23600c3a611af730e.exe

Suspicious use of WriteProcessMemory 12 IoCs

description	pid	Process	procid_target
PID 3052 wrote to memory of 3068	3052	bb2707f9c80ff3c23600c3a611af730e.exe	28
PID 3052 wrote to memory of 3068	3052	bb2707f9c80ff3c23600c3a611af730e.exe	28
PID 3052 wrote to memory of 3068	3052	bb2707f9c80ff3c23600c3a611af730e.exe	28
PID 3052 wrote to memory of 3068	3052	bb2707f9c80ff3c23600c3a611af730e.exe	28
PID 3052 wrote to memory of 3068	3052	bb2707f9c80ff3c23600c3a611af730e.exe	28
PID 3052 wrote to memory of 3068	3052	bb2707f9c80ff3c23600c3a611af730e.exe	28
PID 3052 wrote to memory of 3068	3052	bb2707f9c80ff3c23600c3a611af730e.exe	28
PID 3052 wrote to memory of 3068	3052	bb2707f9c80ff3c23600c3a611af730e.exe	28
PID 3068 wrote to memory of 1348	3068	bb2707f9c80ff3c23600c3a611af730e.exe	21
PID 3068 wrote to memory of 1348	3068	bb2707f9c80ff3c23600c3a611af730e.exe	21
PID 3068 wrote to memory of 1348	3068	bb2707f9c80ff3c23600c3a611af730e.exe	21
PID 3068 wrote to memory of 1348	3068	bb2707f9c80ff3c23600c3a611af730e.exe	21

memory/1348-7-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/1348-11-0x000000007EFD0000-0x000000007EFD1000-memory.dmp

Filesize
4KB

Download
memory/3068-2-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3068-5-0x0000000000400000-0x00000000004083A0-memory.dmp

Filesize
32KB

Download
memory/3068-4-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3068-6-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3068-8-0x0000000010000000-0x0000000010012000-memory.dmp

Filesize
72KB

Download