5cc29e7daefebe29e59f045d58faede87961ded6f84b976b1f8c79ed92a22262

Resubmissions

17/04/2024, 15:21

17/04/2024, 15:19

max time kernel
71s
max time network
78s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
17/04/2024, 15:19

Target

Injector.exe
Size

828KB
MD5

d01e1b0da416f62f217623b8ced5f543
SHA1

6d68bbcfc8b604447a6d15dfbba938b69e67c4e0
SHA256

5cc29e7daefebe29e59f045d58faede87961ded6f84b976b1f8c79ed92a22262
SHA512

0cf03eff650068e55ba1be365d7c0d475b1d6a473d694b1a2e569c8887243d456d2d86c4123030645b4b823234abd08357e01c8adae791997925002680548e17
SSDEEP

24576:0znJgvnacZEjb+87cv32uIg17FxfrW9Gzsu:KnGvy3+8wv32B0FlW9Gzsu

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 3024 set thread context of 1712	3024	Injector.exe	88

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2788	1712	WerFault.exe	88

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	3024	Injector.exe

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 3024 wrote to memory of 1712	3024	Injector.exe	88
PID 3024 wrote to memory of 1712	3024	Injector.exe	88
PID 3024 wrote to memory of 1712	3024	Injector.exe	88
PID 3024 wrote to memory of 1712	3024	Injector.exe	88
PID 3024 wrote to memory of 1712	3024	Injector.exe	88
PID 3024 wrote to memory of 1712	3024	Injector.exe	88
PID 3024 wrote to memory of 1712	3024	Injector.exe	88
PID 3024 wrote to memory of 1712	3024	Injector.exe	88
PID 3024 wrote to memory of 1712	3024	Injector.exe	88
PID 3024 wrote to memory of 1712	3024	Injector.exe	88

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1712 -ip 1712
1⤵
PID:3860

memory/1712-5-0x0000000000400000-0x0000000000494000-memory.dmp

Filesize
592KB

Download
memory/1712-9-0x0000000000400000-0x0000000000494000-memory.dmp

Filesize
592KB

Download
memory/1712-13-0x0000000000400000-0x0000000000494000-memory.dmp

Filesize
592KB

Download
memory/1712-11-0x0000000000400000-0x0000000000494000-memory.dmp

Filesize
592KB

Download
memory/3024-0-0x00000000749A0000-0x0000000075150000-memory.dmp

Filesize
7.7MB

Download
memory/3024-1-0x0000000000B70000-0x0000000000C46000-memory.dmp

Filesize
856KB

Download
memory/3024-2-0x0000000005620000-0x0000000005630000-memory.dmp

Filesize
64KB

Download
memory/3024-7-0x0000000003040000-0x0000000005040000-memory.dmp

Filesize
32.0MB

Download
memory/3024-10-0x00000000749A0000-0x0000000075150000-memory.dmp

Filesize
7.7MB

Download