6e217c13ce7f7104b9e251f715ed0191d1c6751cd9c4b352320c0314fafbe57e

Analysis

max time kernel
26s
max time network
19s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
20-04-2024 22:56

Target

Unlimited_Crack.exe
Size

364KB
MD5

1b8fb8b2b74de6c36c0bf69a0d2f5664
SHA1

8ea83f1e865a9486b7d9a715728af845db23f63c
SHA256

6e217c13ce7f7104b9e251f715ed0191d1c6751cd9c4b352320c0314fafbe57e
SHA512

84dc5ec442558e21bc316dd0745c44d1b57be65c2d8b3326d3c42808977960249ccd9836d7f5fc7e8a17b8d27bf6ebb9671c4a5908f9a1c74c66397ef8859898
SSDEEP

6144:49iJkovicebiNJ0mL2lvArd15G1Yct56vTN19z7yY2lg7mlm1gWnOayBsBGaCv/u:NhaPbiNJFLSAp15Qdsj952ymlxWnjLIu

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

Processes:

Unlimited_Crack.exe

description pid process target process

PID 1760 set thread context of 2568 1760 Unlimited_Crack.exe RegAsm.exe

description	pid	process	target process
PID 1760 set thread context of 2568	1760	Unlimited_Crack.exe	RegAsm.exe

Suspicious use of WriteProcessMemory 21 IoCs

Processes:

Unlimited_Crack.exe

description	pid	process	target process
PID 1760 wrote to memory of 2560	1760	Unlimited_Crack.exe	RegAsm.exe
PID 1760 wrote to memory of 2560	1760	Unlimited_Crack.exe	RegAsm.exe
PID 1760 wrote to memory of 2560	1760	Unlimited_Crack.exe	RegAsm.exe
PID 1760 wrote to memory of 2560	1760	Unlimited_Crack.exe	RegAsm.exe
PID 1760 wrote to memory of 2560	1760	Unlimited_Crack.exe	RegAsm.exe
PID 1760 wrote to memory of 2560	1760	Unlimited_Crack.exe	RegAsm.exe
PID 1760 wrote to memory of 2560	1760	Unlimited_Crack.exe	RegAsm.exe
PID 1760 wrote to memory of 2568	1760	Unlimited_Crack.exe	RegAsm.exe
PID 1760 wrote to memory of 2568	1760	Unlimited_Crack.exe	RegAsm.exe
PID 1760 wrote to memory of 2568	1760	Unlimited_Crack.exe	RegAsm.exe
PID 1760 wrote to memory of 2568	1760	Unlimited_Crack.exe	RegAsm.exe
PID 1760 wrote to memory of 2568	1760	Unlimited_Crack.exe	RegAsm.exe
PID 1760 wrote to memory of 2568	1760	Unlimited_Crack.exe	RegAsm.exe
PID 1760 wrote to memory of 2568	1760	Unlimited_Crack.exe	RegAsm.exe
PID 1760 wrote to memory of 2568	1760	Unlimited_Crack.exe	RegAsm.exe
PID 1760 wrote to memory of 2568	1760	Unlimited_Crack.exe	RegAsm.exe
PID 1760 wrote to memory of 2568	1760	Unlimited_Crack.exe	RegAsm.exe
PID 1760 wrote to memory of 2568	1760	Unlimited_Crack.exe	RegAsm.exe
PID 1760 wrote to memory of 2568	1760	Unlimited_Crack.exe	RegAsm.exe
PID 1760 wrote to memory of 2568	1760	Unlimited_Crack.exe	RegAsm.exe
PID 1760 wrote to memory of 2568	1760	Unlimited_Crack.exe	RegAsm.exe

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
2⤵
PID:2560

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
2⤵
PID:2568

memory/1760-0-0x00000000011D0000-0x0000000001232000-memory.dmp

Filesize
392KB

Download
memory/1760-1-0x0000000074B90000-0x000000007527E000-memory.dmp

Filesize
6.9MB

Download
memory/1760-4-0x0000000002640000-0x0000000004640000-memory.dmp

Filesize
32.0MB

Download
memory/1760-18-0x0000000074B90000-0x000000007527E000-memory.dmp

Filesize
6.9MB

Download
memory/2568-10-0x0000000000400000-0x000000000046D000-memory.dmp

Filesize
436KB

Download
memory/2568-9-0x0000000000400000-0x000000000046D000-memory.dmp

Filesize
436KB

Download
memory/2568-7-0x0000000000400000-0x000000000046D000-memory.dmp

Filesize
436KB

Download
memory/2568-11-0x0000000000400000-0x000000000046D000-memory.dmp

Filesize
436KB

Download
memory/2568-12-0x0000000000400000-0x000000000046D000-memory.dmp

Filesize
436KB

Download
memory/2568-13-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2568-14-0x0000000000400000-0x000000000046D000-memory.dmp

Filesize
436KB

Download
memory/2568-5-0x0000000000400000-0x000000000046D000-memory.dmp

Filesize
436KB

Download
memory/2568-17-0x0000000000400000-0x000000000046D000-memory.dmp

Filesize
436KB

Download
memory/2568-19-0x0000000000400000-0x000000000046D000-memory.dmp

Filesize
436KB

Download
memory/2568-20-0x0000000000400000-0x000000000046D000-memory.dmp

Filesize
436KB

Download