0c5163ac7cf44ce88429a5a47239797ac2fe96b906b9bc707b747279da5eb0ce

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
17-05-2024 18:35

Target

0c5163ac7cf44ce88429a5a47239797ac2fe96b906b9bc707b747279da5eb0ce.exe
Size

734KB
MD5

98b03d6f129e4b30702b3c0f54c0764c
SHA1

b9ec8ef04453025e5002257fafbd13f8dbd45967
SHA256

0c5163ac7cf44ce88429a5a47239797ac2fe96b906b9bc707b747279da5eb0ce
SHA512

ce7e9b6624b59cc5788fd177cf2e55bd95bd3ad127f13639aaf097d92f9f40219b30cba9736d914a666cd8efe57620dc620160d4a3476c1c4f496fe13ddba244
SSDEEP

12288:FZ0pei36RLcTbjp5t4Kvh6BHVdNjgUR0HsXOQumSK54kDJ7NeAbZ:FOpp36dcvN5tfJ6BPNjgaeJmL5QA9

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2176 set thread context of 2160	2176	0c5163ac7cf44ce88429a5a47239797ac2fe96b906b9bc707b747279da5eb0ce.exe	28

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2132	2160	WerFault.exe	28

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
2160	0c5163ac7cf44ce88429a5a47239797ac2fe96b906b9bc707b747279da5eb0ce.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2176 wrote to memory of 2160	2176	0c5163ac7cf44ce88429a5a47239797ac2fe96b906b9bc707b747279da5eb0ce.exe	28
PID 2176 wrote to memory of 2160	2176	0c5163ac7cf44ce88429a5a47239797ac2fe96b906b9bc707b747279da5eb0ce.exe	28
PID 2176 wrote to memory of 2160	2176	0c5163ac7cf44ce88429a5a47239797ac2fe96b906b9bc707b747279da5eb0ce.exe	28
PID 2176 wrote to memory of 2160	2176	0c5163ac7cf44ce88429a5a47239797ac2fe96b906b9bc707b747279da5eb0ce.exe	28
PID 2176 wrote to memory of 2160	2176	0c5163ac7cf44ce88429a5a47239797ac2fe96b906b9bc707b747279da5eb0ce.exe	28
PID 2176 wrote to memory of 2160	2176	0c5163ac7cf44ce88429a5a47239797ac2fe96b906b9bc707b747279da5eb0ce.exe	28
PID 2176 wrote to memory of 2160	2176	0c5163ac7cf44ce88429a5a47239797ac2fe96b906b9bc707b747279da5eb0ce.exe	28
PID 2160 wrote to memory of 2132	2160	0c5163ac7cf44ce88429a5a47239797ac2fe96b906b9bc707b747279da5eb0ce.exe	29
PID 2160 wrote to memory of 2132	2160	0c5163ac7cf44ce88429a5a47239797ac2fe96b906b9bc707b747279da5eb0ce.exe	29
PID 2160 wrote to memory of 2132	2160	0c5163ac7cf44ce88429a5a47239797ac2fe96b906b9bc707b747279da5eb0ce.exe	29
PID 2160 wrote to memory of 2132	2160	0c5163ac7cf44ce88429a5a47239797ac2fe96b906b9bc707b747279da5eb0ce.exe	29

memory/2160-8-0x0000000000400000-0x0000000000442000-memory.dmp

Filesize
264KB

Download
memory/2160-14-0x0000000000400000-0x0000000000442000-memory.dmp

Filesize
264KB

Download
memory/2160-13-0x0000000000A50000-0x0000000000D53000-memory.dmp

Filesize
3.0MB

Download
memory/2160-7-0x0000000000400000-0x0000000000442000-memory.dmp

Filesize
264KB

Download
memory/2160-9-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2160-11-0x0000000000400000-0x0000000000442000-memory.dmp

Filesize
264KB

Download
memory/2176-3-0x00000000003A0000-0x00000000003C2000-memory.dmp

Filesize
136KB

Download
memory/2176-6-0x0000000005C50000-0x0000000005CDA000-memory.dmp

Filesize
552KB

Download
memory/2176-5-0x00000000003D0000-0x00000000003E0000-memory.dmp

Filesize
64KB

Download
memory/2176-4-0x0000000000320000-0x000000000032C000-memory.dmp

Filesize
48KB

Download
memory/2176-0-0x0000000074C9E000-0x0000000074C9F000-memory.dmp

Filesize
4KB

Download
memory/2176-12-0x0000000074C90000-0x000000007537E000-memory.dmp

Filesize
6.9MB

Download
memory/2176-2-0x0000000074C90000-0x000000007537E000-memory.dmp

Filesize
6.9MB

Download
memory/2176-1-0x0000000000990000-0x0000000000A4C000-memory.dmp

Filesize
752KB

Download