71c448587effc005359071cf69be34bba650e7f99535930a2c55f867188ed833

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
18-06-2024 11:39

Target

locky-31.5.exe
Size

191KB
MD5

148dc5f342462f056f214896c3ece162
SHA1

ae463dce3a66e5d668d71d5b6e68bc2c81eac623
SHA256

0c357e3d47167b7370ce5578bb25c4f1c8b1cd87dbd398ecc07bccdac5087aa1
SHA512

86bed4fd43964cdd699e9c37a3db929c3863b7e3874909708c843c0291b3358ec0ea0c0255b87ce59c9ee09031256ac4c64d6bfdcabbe242c98a811770314899
SSDEEP

3072:hRzGicKjPc1MZV+U76+QhXqD7VIADAQcFkBkHoB80xWZ7VVdcvAD/VQbwb2Y:zaicKLc4dWX+qKTcFqkHorxWZ7Ddcve/

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 540 set thread context of 2816	540	locky-31.5.exe	86

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 540 wrote to memory of 2816	540	locky-31.5.exe	86
PID 540 wrote to memory of 2816	540	locky-31.5.exe	86
PID 540 wrote to memory of 2816	540	locky-31.5.exe	86
PID 540 wrote to memory of 2816	540	locky-31.5.exe	86
PID 540 wrote to memory of 2816	540	locky-31.5.exe	86
PID 540 wrote to memory of 2816	540	locky-31.5.exe	86
PID 540 wrote to memory of 2816	540	locky-31.5.exe	86
PID 540 wrote to memory of 2816	540	locky-31.5.exe	86
PID 540 wrote to memory of 2816	540	locky-31.5.exe	86
PID 540 wrote to memory of 2816	540	locky-31.5.exe	86

C:\Users\Admin\AppData\Local\Temp\locky-31.5.exe
"C:\Users\Admin\AppData\Local\Temp\locky-31.5.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:540
- C:\Users\Admin\AppData\Local\Temp\locky-31.5.exe
  "C:\Users\Admin\AppData\Local\Temp\locky-31.5.exe"
  2⤵
  PID:2816

memory/2816-0-0x0000000000400000-0x0000000000420000-memory.dmp

Filesize
128KB

Download
memory/2816-2-0x0000000000400000-0x0000000000420000-memory.dmp

Filesize
128KB

Download
memory/2816-3-0x0000000000400000-0x0000000000420000-memory.dmp

Filesize
128KB

Download
memory/2816-7-0x0000000000BE0000-0x0000000000BE1000-memory.dmp

Filesize
4KB

Download
memory/2816-6-0x0000000000C00000-0x0000000000C20000-memory.dmp

Filesize
128KB

Download
memory/2816-5-0x0000000077182000-0x0000000077183000-memory.dmp

Filesize
4KB

Download
memory/2816-4-0x0000000000400000-0x0000000000420000-memory.dmp

Filesize
128KB

Download