2140f617b2d985bad02c259358a9fe35f7c843e00afd70c75ff9ef07583dc46d

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
26/03/2024, 20:58

Target

e0152cb5b72dae34c74b33549928b5ca.exe
Size

97KB
MD5

e0152cb5b72dae34c74b33549928b5ca
SHA1

08b9a62e596319d2d71ad4f667cf486be3de0dfd
SHA256

2140f617b2d985bad02c259358a9fe35f7c843e00afd70c75ff9ef07583dc46d
SHA512

86b5b987c8c32860c2e11cc83c775acf5443b66765492c4ab22a29a911eab897b47230f9de7370dbbc0f1dd37d362c0589a805754c258332e1bfb67a8babcd59
SSDEEP

1536:5hl47n481N259w4UfLbGARz5YMjVOy4/LHBUJ9+o7o1Un:fiz4hzvUzbGC1bUHB49lo2n

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2220 set thread context of 852	2220	e0152cb5b72dae34c74b33549928b5ca.exe	28

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
852	e0152cb5b72dae34c74b33549928b5ca.exe
852	e0152cb5b72dae34c74b33549928b5ca.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2220	e0152cb5b72dae34c74b33549928b5ca.exe

Suspicious use of WriteProcessMemory 14 IoCs

description	pid	Process	procid_target
PID 2220 wrote to memory of 852	2220	e0152cb5b72dae34c74b33549928b5ca.exe	28
PID 2220 wrote to memory of 852	2220	e0152cb5b72dae34c74b33549928b5ca.exe	28
PID 2220 wrote to memory of 852	2220	e0152cb5b72dae34c74b33549928b5ca.exe	28
PID 2220 wrote to memory of 852	2220	e0152cb5b72dae34c74b33549928b5ca.exe	28
PID 2220 wrote to memory of 852	2220	e0152cb5b72dae34c74b33549928b5ca.exe	28
PID 2220 wrote to memory of 852	2220	e0152cb5b72dae34c74b33549928b5ca.exe	28
PID 2220 wrote to memory of 852	2220	e0152cb5b72dae34c74b33549928b5ca.exe	28
PID 2220 wrote to memory of 852	2220	e0152cb5b72dae34c74b33549928b5ca.exe	28
PID 852 wrote to memory of 1196	852	e0152cb5b72dae34c74b33549928b5ca.exe	21
PID 852 wrote to memory of 1196	852	e0152cb5b72dae34c74b33549928b5ca.exe	21
PID 852 wrote to memory of 1196	852	e0152cb5b72dae34c74b33549928b5ca.exe	21
PID 852 wrote to memory of 1196	852	e0152cb5b72dae34c74b33549928b5ca.exe	21
PID 852 wrote to memory of 1196	852	e0152cb5b72dae34c74b33549928b5ca.exe	21
PID 852 wrote to memory of 1196	852	e0152cb5b72dae34c74b33549928b5ca.exe	21

memory/852-2-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/852-4-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/852-6-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/852-7-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/852-9-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/852-11-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/852-13-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/852-16-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download
memory/1196-14-0x000000007FFF0000-0x000000007FFF1000-memory.dmp

Filesize
4KB

Download
memory/1196-21-0x000000007EFC0000-0x000000007EFC6000-memory.dmp

Filesize
24KB

Download