06edef7fc9a0def8411bc4190fc122ee02f44038ae5a11aaf5c0c54c4f1b22d6

Analysis

max time kernel
141s
max time network
128s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
13/03/2024, 01:32

Target

c4a1787cfc519f1460cb7eee84696693.exe
Size

162KB
MD5

c4a1787cfc519f1460cb7eee84696693
SHA1

2b4c07a34204e0c7d12cd318302c551887c4bb43
SHA256

06edef7fc9a0def8411bc4190fc122ee02f44038ae5a11aaf5c0c54c4f1b22d6
SHA512

1d7d0cecf73a8a286fb5fd26257be4adda74207c7438226a3f5f39a86af35d17b0641f953238392c7094cea7052fe2b00f83e845a4f3a765cd4a1a21dbc1152f
SSDEEP

3072:5hkc71EyqOWNvGl88GSCMAVq5vkC5HDxZX805lLmF8p8cYmWzHRdmEyntg:7X1EyqOWvGRGCAc5THvs03mLbpytg

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1392 set thread context of 4216	1392	c4a1787cfc519f1460cb7eee84696693.exe	96

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 1392 wrote to memory of 4216	1392	c4a1787cfc519f1460cb7eee84696693.exe	96
PID 1392 wrote to memory of 4216	1392	c4a1787cfc519f1460cb7eee84696693.exe	96
PID 1392 wrote to memory of 4216	1392	c4a1787cfc519f1460cb7eee84696693.exe	96
PID 1392 wrote to memory of 4216	1392	c4a1787cfc519f1460cb7eee84696693.exe	96
PID 1392 wrote to memory of 4216	1392	c4a1787cfc519f1460cb7eee84696693.exe	96
PID 1392 wrote to memory of 4216	1392	c4a1787cfc519f1460cb7eee84696693.exe	96
PID 1392 wrote to memory of 4216	1392	c4a1787cfc519f1460cb7eee84696693.exe	96
PID 1392 wrote to memory of 4216	1392	c4a1787cfc519f1460cb7eee84696693.exe	96

C:\Users\Admin\AppData\Local\Temp\c4a1787cfc519f1460cb7eee84696693.exe
"C:\Users\Admin\AppData\Local\Temp\c4a1787cfc519f1460cb7eee84696693.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:1392
- C:\Users\Admin\AppData\Local\Temp\c4a1787cfc519f1460cb7eee84696693.exe
  C:\Users\Admin\AppData\Local\Temp\c4a1787cfc519f1460cb7eee84696693.exe
  2⤵
  PID:4216

memory/1392-0-0x0000000000400000-0x000000000043E000-memory.dmp

Filesize
248KB

Download
memory/1392-1-0x00000000004D0000-0x00000000004D1000-memory.dmp

Filesize
4KB

Download
memory/1392-2-0x0000000002320000-0x0000000002344000-memory.dmp

Filesize
144KB

Download
memory/1392-7-0x0000000000400000-0x000000000043E000-memory.dmp

Filesize
248KB

Download
memory/4216-3-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/4216-8-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/4216-9-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/4216-10-0x0000000000430000-0x00000000004F9000-memory.dmp

Filesize
804KB

Download
memory/4216-11-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download