aebb3d877abe8e9f6340e286a185b90ee7f28fb9956a18d6e7e77c51d2c3cbaa

Analysis

max time kernel
141s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
16/03/2024, 12:50

Target

ce1ada4a0788c4e0278d69c1f905af66.exe
Size

75KB
MD5

ce1ada4a0788c4e0278d69c1f905af66
SHA1

aac2bb26c51742c6eea7ee99f9cf670e2160fcde
SHA256

aebb3d877abe8e9f6340e286a185b90ee7f28fb9956a18d6e7e77c51d2c3cbaa
SHA512

fa07c79150158b41e597e18b90e8deeb20f69ed936fc2d85c50fbf09af8e3731b1563ac6b22202c31fdf15bde36f69736cc2715690c0d2b0a82dde5f5bee90a7
SSDEEP

1536:AFpf6+EY0XI3S2fIyZGMpjL9VazmZLzbujWnXwKRgHzNg+UTgd1CP:mpC+EY04QdejLvazmVqKOHBg+UTgKP

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2044 set thread context of 2768	2044	ce1ada4a0788c4e0278d69c1f905af66.exe	89

Suspicious behavior: EnumeratesProcesses 4 IoCs

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2044	ce1ada4a0788c4e0278d69c1f905af66.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2044 wrote to memory of 2768	2044	ce1ada4a0788c4e0278d69c1f905af66.exe	89
PID 2044 wrote to memory of 2768	2044	ce1ada4a0788c4e0278d69c1f905af66.exe	89
PID 2044 wrote to memory of 2768	2044	ce1ada4a0788c4e0278d69c1f905af66.exe	89
PID 2044 wrote to memory of 2768	2044	ce1ada4a0788c4e0278d69c1f905af66.exe	89
PID 2044 wrote to memory of 2768	2044	ce1ada4a0788c4e0278d69c1f905af66.exe	89
PID 2044 wrote to memory of 2768	2044	ce1ada4a0788c4e0278d69c1f905af66.exe	89
PID 2044 wrote to memory of 2768	2044	ce1ada4a0788c4e0278d69c1f905af66.exe	89
PID 2768 wrote to memory of 3472	2768	ce1ada4a0788c4e0278d69c1f905af66.exe	57
PID 2768 wrote to memory of 3472	2768	ce1ada4a0788c4e0278d69c1f905af66.exe	57
PID 2768 wrote to memory of 3472	2768	ce1ada4a0788c4e0278d69c1f905af66.exe	57
PID 2768 wrote to memory of 3472	2768	ce1ada4a0788c4e0278d69c1f905af66.exe	57

memory/2044-0-0x0000000000400000-0x0000000000439000-memory.dmp

Filesize
228KB

Download
memory/2044-7-0x0000000000400000-0x0000000000439000-memory.dmp

Filesize
228KB

Download
memory/2768-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2768-5-0x0000000000400000-0x0000000000408960-memory.dmp

Filesize
34KB

Download
memory/2768-6-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2768-8-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2768-9-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/2768-15-0x0000000000400000-0x0000000000408960-memory.dmp

Filesize
34KB

Download
memory/2768-16-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/3472-10-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/3472-11-0x000000007FFD0000-0x000000007FFD1000-memory.dmp

Filesize
4KB

Download