2140f617b2d985bad02c259358a9fe35f7c843e00afd70c75ff9ef07583dc46d

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
26-03-2024 20:58

Target

e0152cb5b72dae34c74b33549928b5ca.exe
Size

97KB
MD5

e0152cb5b72dae34c74b33549928b5ca
SHA1

08b9a62e596319d2d71ad4f667cf486be3de0dfd
SHA256

2140f617b2d985bad02c259358a9fe35f7c843e00afd70c75ff9ef07583dc46d
SHA512

86b5b987c8c32860c2e11cc83c775acf5443b66765492c4ab22a29a911eab897b47230f9de7370dbbc0f1dd37d362c0589a805754c258332e1bfb67a8babcd59
SSDEEP

1536:5hl47n481N259w4UfLbGARz5YMjVOy4/LHBUJ9+o7o1Un:fiz4hzvUzbGC1bUHB49lo2n

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 864 set thread context of 4400	864	e0152cb5b72dae34c74b33549928b5ca.exe	87

Suspicious behavior: EnumeratesProcesses 4 IoCs

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
864	e0152cb5b72dae34c74b33549928b5ca.exe

Suspicious use of WriteProcessMemory 13 IoCs

description	pid	Process	procid_target
PID 864 wrote to memory of 4400	864	e0152cb5b72dae34c74b33549928b5ca.exe	87
PID 864 wrote to memory of 4400	864	e0152cb5b72dae34c74b33549928b5ca.exe	87
PID 864 wrote to memory of 4400	864	e0152cb5b72dae34c74b33549928b5ca.exe	87
PID 864 wrote to memory of 4400	864	e0152cb5b72dae34c74b33549928b5ca.exe	87
PID 864 wrote to memory of 4400	864	e0152cb5b72dae34c74b33549928b5ca.exe	87
PID 864 wrote to memory of 4400	864	e0152cb5b72dae34c74b33549928b5ca.exe	87
PID 864 wrote to memory of 4400	864	e0152cb5b72dae34c74b33549928b5ca.exe	87
PID 4400 wrote to memory of 3448	4400	e0152cb5b72dae34c74b33549928b5ca.exe	57
PID 4400 wrote to memory of 3448	4400	e0152cb5b72dae34c74b33549928b5ca.exe	57
PID 4400 wrote to memory of 3448	4400	e0152cb5b72dae34c74b33549928b5ca.exe	57
PID 4400 wrote to memory of 3448	4400	e0152cb5b72dae34c74b33549928b5ca.exe	57
PID 4400 wrote to memory of 3448	4400	e0152cb5b72dae34c74b33549928b5ca.exe	57
PID 4400 wrote to memory of 3448	4400	e0152cb5b72dae34c74b33549928b5ca.exe	57

memory/3448-8-0x000000007FFF0000-0x000000007FFF1000-memory.dmp

Filesize
4KB

Download
memory/3448-10-0x000000007FFC0000-0x000000007FFC6000-memory.dmp

Filesize
24KB

Download
memory/4400-2-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/4400-4-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/4400-5-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/4400-6-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download
memory/4400-16-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download