a2bad6f3295d4cfc8b63bb059ca536f16c3193dce299e631563b7b04e39530a7

Analysis

max time kernel
147s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
25/06/2024, 08:09

Target

Consignment Notification- 7056432910.exe
Size

743KB
MD5

03ef802be1a0f396e1035594b6af958d
SHA1

b3aebdfbbcbc548d387c2c8ef8ab06213f42bfb4
SHA256

52f2b64436988a3a692aad80b6a2f619463766e158f5e9c494d87e10e8def6dd
SHA512

bdb9ce902de706de9d1d6ef97ea6a73aec79e70b1399a7a83bd43844752dbcd0160c551ff5f52d6337dad8d3eb3384bfc57365cf8162ea015d7c2109bb7aa13e
SSDEEP

12288:J9/NkFzQmt3CeQgDwN8bzmWvdP62KEIEM/ZbOwgafVPRO+5DiQXq6:7/NkFQmtRvG8bzzlP6wvvCPQ0rR

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 3380 set thread context of 4764	3380	Consignment Notification- 7056432910.exe	81

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
3380	Consignment Notification- 7056432910.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	3380	Consignment Notification- 7056432910.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3380 wrote to memory of 4764	3380	Consignment Notification- 7056432910.exe	81
PID 3380 wrote to memory of 4764	3380	Consignment Notification- 7056432910.exe	81
PID 3380 wrote to memory of 4764	3380	Consignment Notification- 7056432910.exe	81

C:\Users\Admin\AppData\Local\Temp\Consignment Notification- 7056432910.exe
"C:\Users\Admin\AppData\Local\Temp\Consignment Notification- 7056432910.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:3380
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exe
  C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exe
  2⤵
  PID:4764

memory/3380-0-0x00007FFDE63E3000-0x00007FFDE63E5000-memory.dmp

Filesize
8KB

Download
memory/3380-1-0x0000000000920000-0x00000000009E0000-memory.dmp

Filesize
768KB

Download
memory/3380-2-0x00007FFDE63E0000-0x00007FFDE6EA1000-memory.dmp

Filesize
10.8MB

Download
memory/3380-3-0x000000001C5F0000-0x000000001C614000-memory.dmp

Filesize
144KB

Download
memory/3380-4-0x000000001F960000-0x000000001F976000-memory.dmp

Filesize
88KB

Download
memory/3380-5-0x00000000013C0000-0x00000000013D4000-memory.dmp

Filesize
80KB

Download
memory/3380-6-0x000000001FDB0000-0x000000001FE38000-memory.dmp

Filesize
544KB

Download
memory/3380-8-0x00007FFDE63E0000-0x00007FFDE6EA1000-memory.dmp

Filesize
10.8MB

Download