6ab3a5c5cf64765758eceb241aad5ba0f866f2639daf388a01965d949f417682

Analysis

max time kernel
147s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
08-03-2024 11:30

Target

bb2707f9c80ff3c23600c3a611af730e.exe
Size

180KB
MD5

bb2707f9c80ff3c23600c3a611af730e
SHA1

e8f2ed68a7c1c499b37810a24d11e254f5dcb8f8
SHA256

6ab3a5c5cf64765758eceb241aad5ba0f866f2639daf388a01965d949f417682
SHA512

17c241f753c30ecd529e66a33b2d294d68ca868a2309bd1def236c9c2e698074454494356a66fb1ee58700e19d130a1a8a8851e1f2fd47802c01d870e49a5bad
SSDEEP

3072:bqCEUP0Fx0k4MWJjFalEadPFO0c6p866zn/431FZdsALSU/:c1dyU/

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 3892 set thread context of 1952	3892	bb2707f9c80ff3c23600c3a611af730e.exe	89

Suspicious behavior: EnumeratesProcesses 4 IoCs

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3892	bb2707f9c80ff3c23600c3a611af730e.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 3892 wrote to memory of 1952	3892	bb2707f9c80ff3c23600c3a611af730e.exe	89
PID 3892 wrote to memory of 1952	3892	bb2707f9c80ff3c23600c3a611af730e.exe	89
PID 3892 wrote to memory of 1952	3892	bb2707f9c80ff3c23600c3a611af730e.exe	89
PID 3892 wrote to memory of 1952	3892	bb2707f9c80ff3c23600c3a611af730e.exe	89
PID 3892 wrote to memory of 1952	3892	bb2707f9c80ff3c23600c3a611af730e.exe	89
PID 3892 wrote to memory of 1952	3892	bb2707f9c80ff3c23600c3a611af730e.exe	89
PID 3892 wrote to memory of 1952	3892	bb2707f9c80ff3c23600c3a611af730e.exe	89
PID 1952 wrote to memory of 3488	1952	bb2707f9c80ff3c23600c3a611af730e.exe	57
PID 1952 wrote to memory of 3488	1952	bb2707f9c80ff3c23600c3a611af730e.exe	57
PID 1952 wrote to memory of 3488	1952	bb2707f9c80ff3c23600c3a611af730e.exe	57
PID 1952 wrote to memory of 3488	1952	bb2707f9c80ff3c23600c3a611af730e.exe	57

memory/1952-2-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1952-3-0x0000000000400000-0x00000000004083A0-memory.dmp

Filesize
32KB

Download
memory/1952-5-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1952-6-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1952-7-0x0000000010000000-0x0000000010012000-memory.dmp

Filesize
72KB

Download
memory/1952-13-0x0000000000400000-0x00000000004083A0-memory.dmp

Filesize
32KB

Download
memory/1952-14-0x0000000010000000-0x0000000010012000-memory.dmp

Filesize
72KB

Download
memory/3488-8-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/3488-9-0x000000007FFD0000-0x000000007FFD1000-memory.dmp

Filesize
4KB

Download