4054ee21cbfc210489f119c2d717ca1ae43129fc0d07aefe322fabb3b61d079f

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
09-03-2024 14:53

Target

bc15770f9c1c0735cb5cc9d800476ab0.exe
Size

76KB
MD5

bc15770f9c1c0735cb5cc9d800476ab0
SHA1

7700f53b4de7abcd0aa28a1989f73aad394b49bb
SHA256

4054ee21cbfc210489f119c2d717ca1ae43129fc0d07aefe322fabb3b61d079f
SHA512

1073a97fbd39f6d96b05d8a52f8d1e9759b879d9fcf4089f1159a3cbed55e0ca6b3da529df09bae0f1c37c259c482c7e56d279e7c0afa58c6f3cbaff615762d4
SSDEEP

1536:rRJABDWoKGVG6BOiBQAh4QiObju5FBHIIMLtfn:dJ3GVGdiBQAeQiObjsFBHIbl

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

bc15770f9c1c0735cb5cc9d800476ab0.exe

pid	Process
2192	bc15770f9c1c0735cb5cc9d800476ab0.exe
2192	bc15770f9c1c0735cb5cc9d800476ab0.exe

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

bc15770f9c1c0735cb5cc9d800476ab0.exe

description	pid	Process	procid_target
PID 2192 wrote to memory of 2344	2192	bc15770f9c1c0735cb5cc9d800476ab0.exe	28
PID 2192 wrote to memory of 2344	2192	bc15770f9c1c0735cb5cc9d800476ab0.exe	28
PID 2192 wrote to memory of 2344	2192	bc15770f9c1c0735cb5cc9d800476ab0.exe	28

C:\Users\Admin\AppData\Local\Temp\bc15770f9c1c0735cb5cc9d800476ab0.exe
"C:\Users\Admin\AppData\Local\Temp\bc15770f9c1c0735cb5cc9d800476ab0.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2192
- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\dw20.exe
  dw20.exe -x -s 640
  2⤵
  PID:2344

memory/2192-0-0x000007FEF5FB0000-0x000007FEF694D000-memory.dmp

Filesize
9.6MB

Download
memory/2192-1-0x0000000002140000-0x00000000021C0000-memory.dmp

Filesize
512KB

Download
memory/2192-2-0x000007FEF5FB0000-0x000007FEF694D000-memory.dmp

Filesize
9.6MB

Download
memory/2192-4-0x0000000002140000-0x00000000021C0000-memory.dmp

Filesize
512KB

Download
memory/2192-3-0x0000000002140000-0x00000000021C0000-memory.dmp

Filesize
512KB

Download
memory/2192-6-0x000007FEF5FB0000-0x000007FEF694D000-memory.dmp

Filesize
9.6MB

Download
memory/2192-7-0x0000000002140000-0x00000000021C0000-memory.dmp

Filesize
512KB

Download
memory/2344-5-0x0000000000280000-0x0000000000281000-memory.dmp

Filesize
4KB

Download