06edef7fc9a0def8411bc4190fc122ee02f44038ae5a11aaf5c0c54c4f1b22d6

Analysis

max time kernel
121s
max time network
126s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
13/03/2024, 01:32

Target

c4a1787cfc519f1460cb7eee84696693.exe
Size

162KB
MD5

c4a1787cfc519f1460cb7eee84696693
SHA1

2b4c07a34204e0c7d12cd318302c551887c4bb43
SHA256

06edef7fc9a0def8411bc4190fc122ee02f44038ae5a11aaf5c0c54c4f1b22d6
SHA512

1d7d0cecf73a8a286fb5fd26257be4adda74207c7438226a3f5f39a86af35d17b0641f953238392c7094cea7052fe2b00f83e845a4f3a765cd4a1a21dbc1152f
SSDEEP

3072:5hkc71EyqOWNvGl88GSCMAVq5vkC5HDxZX805lLmF8p8cYmWzHRdmEyntg:7X1EyqOWvGRGCAc5THvs03mLbpytg

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2228 set thread context of 2392	2228	c4a1787cfc519f1460cb7eee84696693.exe	30

Suspicious use of WriteProcessMemory 9 IoCs

description	pid	Process	procid_target
PID 2228 wrote to memory of 2392	2228	c4a1787cfc519f1460cb7eee84696693.exe	30
PID 2228 wrote to memory of 2392	2228	c4a1787cfc519f1460cb7eee84696693.exe	30
PID 2228 wrote to memory of 2392	2228	c4a1787cfc519f1460cb7eee84696693.exe	30
PID 2228 wrote to memory of 2392	2228	c4a1787cfc519f1460cb7eee84696693.exe	30
PID 2228 wrote to memory of 2392	2228	c4a1787cfc519f1460cb7eee84696693.exe	30
PID 2228 wrote to memory of 2392	2228	c4a1787cfc519f1460cb7eee84696693.exe	30
PID 2228 wrote to memory of 2392	2228	c4a1787cfc519f1460cb7eee84696693.exe	30
PID 2228 wrote to memory of 2392	2228	c4a1787cfc519f1460cb7eee84696693.exe	30
PID 2228 wrote to memory of 2392	2228	c4a1787cfc519f1460cb7eee84696693.exe	30

C:\Users\Admin\AppData\Local\Temp\c4a1787cfc519f1460cb7eee84696693.exe
"C:\Users\Admin\AppData\Local\Temp\c4a1787cfc519f1460cb7eee84696693.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:2228
- C:\Users\Admin\AppData\Local\Temp\c4a1787cfc519f1460cb7eee84696693.exe
  C:\Users\Admin\AppData\Local\Temp\c4a1787cfc519f1460cb7eee84696693.exe
  2⤵
  PID:2392

memory/2228-1-0x0000000000220000-0x0000000000221000-memory.dmp

Filesize
4KB

Download
memory/2228-0-0x0000000000400000-0x000000000043E000-memory.dmp

Filesize
248KB

Download
memory/2228-2-0x00000000002C0000-0x00000000002E4000-memory.dmp

Filesize
144KB

Download
memory/2228-4-0x0000000000550000-0x000000000058E000-memory.dmp

Filesize
248KB

Download
memory/2228-18-0x0000000000400000-0x000000000043E000-memory.dmp

Filesize
248KB

Download
memory/2392-8-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/2392-10-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/2392-6-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/2392-12-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2392-14-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/2392-3-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/2392-19-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/2392-20-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/2392-22-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download