5cc29e7daefebe29e59f045d58faede87961ded6f84b976b1f8c79ed92a22262

Resubmissions

17-04-2024 15:21

17-04-2024 15:19

max time kernel
134s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
17-04-2024 15:21

Target

Injector.exe
Size

828KB
MD5

d01e1b0da416f62f217623b8ced5f543
SHA1

6d68bbcfc8b604447a6d15dfbba938b69e67c4e0
SHA256

5cc29e7daefebe29e59f045d58faede87961ded6f84b976b1f8c79ed92a22262
SHA512

0cf03eff650068e55ba1be365d7c0d475b1d6a473d694b1a2e569c8887243d456d2d86c4123030645b4b823234abd08357e01c8adae791997925002680548e17
SSDEEP

24576:0znJgvnacZEjb+87cv32uIg17FxfrW9Gzsu:KnGvy3+8wv32B0FlW9Gzsu

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1512 set thread context of 3984	1512	Injector.exe	89

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4144	3984	WerFault.exe	89

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1512	Injector.exe

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 1512 wrote to memory of 3984	1512	Injector.exe	89
PID 1512 wrote to memory of 3984	1512	Injector.exe	89
PID 1512 wrote to memory of 3984	1512	Injector.exe	89
PID 1512 wrote to memory of 3984	1512	Injector.exe	89
PID 1512 wrote to memory of 3984	1512	Injector.exe	89
PID 1512 wrote to memory of 3984	1512	Injector.exe	89
PID 1512 wrote to memory of 3984	1512	Injector.exe	89
PID 1512 wrote to memory of 3984	1512	Injector.exe	89
PID 1512 wrote to memory of 3984	1512	Injector.exe	89
PID 1512 wrote to memory of 3984	1512	Injector.exe	89

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3984 -ip 3984
1⤵
PID:4776

memory/1512-0-0x0000000000FB0000-0x0000000001086000-memory.dmp

Filesize
856KB

Download
memory/1512-1-0x0000000074BC0000-0x0000000075370000-memory.dmp

Filesize
7.7MB

Download
memory/1512-2-0x0000000005B80000-0x0000000005B90000-memory.dmp

Filesize
64KB

Download
memory/1512-12-0x0000000003610000-0x0000000005610000-memory.dmp

Filesize
32.0MB

Download
memory/1512-11-0x0000000074BC0000-0x0000000075370000-memory.dmp

Filesize
7.7MB

Download
memory/1512-14-0x0000000003610000-0x0000000005610000-memory.dmp

Filesize
32.0MB

Download
memory/3984-5-0x0000000000400000-0x0000000000494000-memory.dmp

Filesize
592KB

Download
memory/3984-7-0x0000000000400000-0x0000000000494000-memory.dmp

Filesize
592KB

Download
memory/3984-8-0x0000000000400000-0x0000000000494000-memory.dmp

Filesize
592KB

Download
memory/3984-13-0x0000000000400000-0x0000000000494000-memory.dmp

Filesize
592KB

Download