aebb3d877abe8e9f6340e286a185b90ee7f28fb9956a18d6e7e77c51d2c3cbaa

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
16/03/2024, 12:50

Target

ce1ada4a0788c4e0278d69c1f905af66.exe
Size

75KB
MD5

ce1ada4a0788c4e0278d69c1f905af66
SHA1

aac2bb26c51742c6eea7ee99f9cf670e2160fcde
SHA256

aebb3d877abe8e9f6340e286a185b90ee7f28fb9956a18d6e7e77c51d2c3cbaa
SHA512

fa07c79150158b41e597e18b90e8deeb20f69ed936fc2d85c50fbf09af8e3731b1563ac6b22202c31fdf15bde36f69736cc2715690c0d2b0a82dde5f5bee90a7
SSDEEP

1536:AFpf6+EY0XI3S2fIyZGMpjL9VazmZLzbujWnXwKRgHzNg+UTgd1CP:mpC+EY04QdejLvazmVqKOHBg+UTgKP

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1968 set thread context of 3060	1968	ce1ada4a0788c4e0278d69c1f905af66.exe	28

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3060	ce1ada4a0788c4e0278d69c1f905af66.exe
3060	ce1ada4a0788c4e0278d69c1f905af66.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1968	ce1ada4a0788c4e0278d69c1f905af66.exe

Suspicious use of WriteProcessMemory 12 IoCs

description	pid	Process	procid_target
PID 1968 wrote to memory of 3060	1968	ce1ada4a0788c4e0278d69c1f905af66.exe	28
PID 1968 wrote to memory of 3060	1968	ce1ada4a0788c4e0278d69c1f905af66.exe	28
PID 1968 wrote to memory of 3060	1968	ce1ada4a0788c4e0278d69c1f905af66.exe	28
PID 1968 wrote to memory of 3060	1968	ce1ada4a0788c4e0278d69c1f905af66.exe	28
PID 1968 wrote to memory of 3060	1968	ce1ada4a0788c4e0278d69c1f905af66.exe	28
PID 1968 wrote to memory of 3060	1968	ce1ada4a0788c4e0278d69c1f905af66.exe	28
PID 1968 wrote to memory of 3060	1968	ce1ada4a0788c4e0278d69c1f905af66.exe	28
PID 1968 wrote to memory of 3060	1968	ce1ada4a0788c4e0278d69c1f905af66.exe	28
PID 3060 wrote to memory of 1200	3060	ce1ada4a0788c4e0278d69c1f905af66.exe	21
PID 3060 wrote to memory of 1200	3060	ce1ada4a0788c4e0278d69c1f905af66.exe	21
PID 3060 wrote to memory of 1200	3060	ce1ada4a0788c4e0278d69c1f905af66.exe	21
PID 3060 wrote to memory of 1200	3060	ce1ada4a0788c4e0278d69c1f905af66.exe	21

memory/1200-21-0x000000007EFD0000-0x000000007EFD1000-memory.dmp

Filesize
4KB

Download
memory/1200-17-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/1968-0-0x0000000000400000-0x0000000000439000-memory.dmp

Filesize
228KB

Download
memory/1968-13-0x0000000000400000-0x0000000000439000-memory.dmp

Filesize
228KB

Download
memory/3060-15-0x0000000000400000-0x0000000000408960-memory.dmp

Filesize
34KB

Download
memory/3060-11-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3060-9-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/3060-14-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3060-7-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3060-16-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3060-5-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3060-19-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/3060-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3060-30-0x0000000000400000-0x0000000000408960-memory.dmp

Filesize
34KB

Download