91de5d644df27588dc5ac0cf33e902a6032403012f06a84b20de3d9daccb78e1

Analysis

max time kernel
148s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
18/07/2024, 05:48

Target
ISU8109C5352024.exe
Size 1.9MB
Sample240718-ghfwcszhqd
SHA256 91de5d644df27588dc5ac0cf33e902a6032403012f06a84b20de3d9daccb78e1
MD5 a4bce92a13ed75b4a61d0b33764de8ae
SHA1 5281e8047d08086b3acaac190307f78a7d4ec3c5
SHA512 0abd7066d326ee8b63e2326716f24f77c443eed4428bd2815e3c12f9318e8267e379aeffdcd19be0b127865993c5c57435077775b5ba990291e027379c5bf6c0
SSDEEP 49152:a01xRoq0SqdSo1s9Z7N/pilLbWQ87oFfXUiUDL1jPGWp6lTdh:End9UvyJ
MD5 SHA1 SHA512 SSDEEP

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2520 set thread context of 4892	2520	ISU8109C5352024.exe	88

Suspicious behavior: EnumeratesProcesses 14 IoCs

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 2520 wrote to memory of 4892	2520	ISU8109C5352024.exe	88
PID 2520 wrote to memory of 4892	2520	ISU8109C5352024.exe	88
PID 2520 wrote to memory of 4892	2520	ISU8109C5352024.exe	88
PID 2520 wrote to memory of 4892	2520	ISU8109C5352024.exe	88
PID 2520 wrote to memory of 4892	2520	ISU8109C5352024.exe	88
PID 2520 wrote to memory of 4892	2520	ISU8109C5352024.exe	88

C:\Users\Admin\AppData\Local\Temp\ISU8109C5352024.exe
"C:\Users\Admin\AppData\Local\Temp\ISU8109C5352024.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:2520
- C:\Windows\Microsoft.NET\Framework\v4.0.30319\ilasm.exe
  "C:\Windows\Microsoft.NET\Framework\v4.0.30319\ilasm.exe"
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4892

memory/4892-0-0x0000000000400000-0x0000000000442000-memory.dmp

Download

memory/4892-1-0x0000000001E90000-0x00000000021DA000-memory.dmp

Download

memory/4892-2-0x0000000000400000-0x0000000000442000-memory.dmp

Download

memory/4892-3-0x0000000000400000-0x0000000000442000-memory.dmp

Download