e0c7a974ee35a0e9410cee3e9bf9e0f6d265e14064449db9e288da4d92e7b447

Analysis

max time kernel
119s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
31/05/2024, 09:39

Target

e0c7a974ee35a0e9410cee3e9bf9e0f6d265e14064449db9e288da4d92e7b447.exe
Size

713KB
MD5

edcce91324050def7e045bb06be5e0e2
SHA1

0568091db913a7d94aa0f79390971c62ee860714
SHA256

e0c7a974ee35a0e9410cee3e9bf9e0f6d265e14064449db9e288da4d92e7b447
SHA512

6c8a6204991e758bfb9de695408e3605658d7c9f57dff90188a48f005c2c617432555194a5b2e54baa6f554fc210b688d4f04ae4f98fb894168b0b9188c37cde
SSDEEP

12288:9bBPJwKcI0rhsSlsK2SBcLhP+dJUGMYuo2m1qp1H1FWYj2B/VUi4mAmv10i:ZBhcbradKZChINCoXuFWYjg9x10

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2804 set thread context of 2680	2804	e0c7a974ee35a0e9410cee3e9bf9e0f6d265e14064449db9e288da4d92e7b447.exe	28

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2536	2680	WerFault.exe	28

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
2680	e0c7a974ee35a0e9410cee3e9bf9e0f6d265e14064449db9e288da4d92e7b447.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2804 wrote to memory of 2680	2804	e0c7a974ee35a0e9410cee3e9bf9e0f6d265e14064449db9e288da4d92e7b447.exe	28
PID 2804 wrote to memory of 2680	2804	e0c7a974ee35a0e9410cee3e9bf9e0f6d265e14064449db9e288da4d92e7b447.exe	28
PID 2804 wrote to memory of 2680	2804	e0c7a974ee35a0e9410cee3e9bf9e0f6d265e14064449db9e288da4d92e7b447.exe	28
PID 2804 wrote to memory of 2680	2804	e0c7a974ee35a0e9410cee3e9bf9e0f6d265e14064449db9e288da4d92e7b447.exe	28
PID 2804 wrote to memory of 2680	2804	e0c7a974ee35a0e9410cee3e9bf9e0f6d265e14064449db9e288da4d92e7b447.exe	28
PID 2804 wrote to memory of 2680	2804	e0c7a974ee35a0e9410cee3e9bf9e0f6d265e14064449db9e288da4d92e7b447.exe	28
PID 2804 wrote to memory of 2680	2804	e0c7a974ee35a0e9410cee3e9bf9e0f6d265e14064449db9e288da4d92e7b447.exe	28
PID 2680 wrote to memory of 2536	2680	e0c7a974ee35a0e9410cee3e9bf9e0f6d265e14064449db9e288da4d92e7b447.exe	29
PID 2680 wrote to memory of 2536	2680	e0c7a974ee35a0e9410cee3e9bf9e0f6d265e14064449db9e288da4d92e7b447.exe	29
PID 2680 wrote to memory of 2536	2680	e0c7a974ee35a0e9410cee3e9bf9e0f6d265e14064449db9e288da4d92e7b447.exe	29
PID 2680 wrote to memory of 2536	2680	e0c7a974ee35a0e9410cee3e9bf9e0f6d265e14064449db9e288da4d92e7b447.exe	29

memory/2680-6-0x0000000000400000-0x0000000000442000-memory.dmp

Filesize
264KB

Download
memory/2680-8-0x0000000000400000-0x0000000000442000-memory.dmp

Filesize
264KB

Download
memory/2680-12-0x0000000000400000-0x0000000000442000-memory.dmp

Filesize
264KB

Download
memory/2680-10-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2680-14-0x00000000009C0000-0x0000000000CC3000-memory.dmp

Filesize
3.0MB

Download
memory/2680-15-0x0000000000400000-0x0000000000442000-memory.dmp

Filesize
264KB

Download
memory/2804-1-0x0000000000900000-0x00000000009B8000-memory.dmp

Filesize
736KB

Download
memory/2804-2-0x0000000074280000-0x000000007496E000-memory.dmp

Filesize
6.9MB

Download
memory/2804-3-0x0000000001E60000-0x0000000001E78000-memory.dmp

Filesize
96KB

Download
memory/2804-4-0x00000000006B0000-0x00000000006C0000-memory.dmp

Filesize
64KB

Download
memory/2804-5-0x0000000005C70000-0x0000000005CFA000-memory.dmp

Filesize
552KB

Download
memory/2804-0-0x000000007428E000-0x000000007428F000-memory.dmp

Filesize
4KB

Download
memory/2804-13-0x0000000074280000-0x000000007496E000-memory.dmp

Filesize
6.9MB

Download