3ef84b7693f6427baa13a1201bec1ef170280589936a779fa93351c7ff25d0da

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
07/07/2024, 03:55

Target

c4d7b2bd0aaa6170927847109bad1c031ecb37cf4d7460f6f89f0a60b0e6f962.exe
Size

870KB
MD5

e23d2ca62a74b01535286d6fb22611c6
SHA1

b8bf9fd6d58ab07fa3f5707cff778be7a4c289c3
SHA256

c4d7b2bd0aaa6170927847109bad1c031ecb37cf4d7460f6f89f0a60b0e6f962
SHA512

47c34a4d0c52ab3e400c68aacccbee47afae71dc4bbdd49116358c844eda0b0bda84f18246edbabc33da14e089445e9278fbf7da6bc85199e037d7501a935ef2
SSDEEP

24576:u9ld0LQpaIcqzLGIOGfT5F8SDj51X99VlqKRXFZV:mld0LQ8IzLF70ojXX9JNRXF/

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2176 set thread context of 1184	2176	c4d7b2bd0aaa6170927847109bad1c031ecb37cf4d7460f6f89f0a60b0e6f962.exe	31

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2176 wrote to memory of 1184	2176	c4d7b2bd0aaa6170927847109bad1c031ecb37cf4d7460f6f89f0a60b0e6f962.exe	31
PID 2176 wrote to memory of 1184	2176	c4d7b2bd0aaa6170927847109bad1c031ecb37cf4d7460f6f89f0a60b0e6f962.exe	31
PID 2176 wrote to memory of 1184	2176	c4d7b2bd0aaa6170927847109bad1c031ecb37cf4d7460f6f89f0a60b0e6f962.exe	31
PID 2176 wrote to memory of 1184	2176	c4d7b2bd0aaa6170927847109bad1c031ecb37cf4d7460f6f89f0a60b0e6f962.exe	31

C:\Users\Admin\AppData\Local\Temp\c4d7b2bd0aaa6170927847109bad1c031ecb37cf4d7460f6f89f0a60b0e6f962.exe
"C:\Users\Admin\AppData\Local\Temp\c4d7b2bd0aaa6170927847109bad1c031ecb37cf4d7460f6f89f0a60b0e6f962.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:2176
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exe
  C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exe
  2⤵
  PID:1184

memory/1184-7-0x000007FFFFFDF000-0x000007FFFFFE0000-memory.dmp

Filesize
4KB

Download
memory/2176-0-0x000007FEF5B03000-0x000007FEF5B04000-memory.dmp

Filesize
4KB

Download
memory/2176-1-0x000000013F070000-0x000000013F14E000-memory.dmp

Filesize
888KB

Download
memory/2176-2-0x000007FEF5B00000-0x000007FEF64EC000-memory.dmp

Filesize
9.9MB

Download
memory/2176-3-0x0000000002280000-0x00000000022A4000-memory.dmp

Filesize
144KB

Download
memory/2176-4-0x0000000002330000-0x0000000002346000-memory.dmp

Filesize
88KB

Download
memory/2176-5-0x00000000020E0000-0x00000000020F4000-memory.dmp

Filesize
80KB

Download
memory/2176-6-0x000000001BE40000-0x000000001BEC8000-memory.dmp

Filesize
544KB

Download
memory/2176-9-0x000007FEF5B00000-0x000007FEF64EC000-memory.dmp

Filesize
9.9MB

Download