5aac87d916d8ec903c67280fdff17ce94064c80e0717d7e102d31aa26aa003a9

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
19-07-2024 15:29

Target

5aac87d916d8ec903c67280fdff17ce94064c80e0717d7e102d31aa26aa003a9.exe
Size

733KB
MD5

6d78a61f79cc18ead8696494ce27dbad
SHA1

1f0958f28606291c80bfcc75d266436e113b834a
SHA256

5aac87d916d8ec903c67280fdff17ce94064c80e0717d7e102d31aa26aa003a9
SHA512

05281314a4fdc995c7e5de897ef9dea41291e6ac21e6485f04058ceee6600db2dae8fb2b84cd06283c2467ef681e7e8787b4771e5984274487ca360bc7a51f36
SSDEEP

12288:999glhSbbCawGefbDqC4uBfCXoQE6c1M/ChSGspcAfnrjBKQ9Hr4hjr:9nwGeTDmaCXoV1M/CgcQnrdY

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2756 set thread context of 2896	2756	5aac87d916d8ec903c67280fdff17ce94064c80e0717d7e102d31aa26aa003a9.exe	30

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2652	2896	WerFault.exe	30

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2756 wrote to memory of 2896	2756	5aac87d916d8ec903c67280fdff17ce94064c80e0717d7e102d31aa26aa003a9.exe	30
PID 2756 wrote to memory of 2896	2756	5aac87d916d8ec903c67280fdff17ce94064c80e0717d7e102d31aa26aa003a9.exe	30
PID 2756 wrote to memory of 2896	2756	5aac87d916d8ec903c67280fdff17ce94064c80e0717d7e102d31aa26aa003a9.exe	30
PID 2756 wrote to memory of 2896	2756	5aac87d916d8ec903c67280fdff17ce94064c80e0717d7e102d31aa26aa003a9.exe	30
PID 2756 wrote to memory of 2896	2756	5aac87d916d8ec903c67280fdff17ce94064c80e0717d7e102d31aa26aa003a9.exe	30
PID 2756 wrote to memory of 2896	2756	5aac87d916d8ec903c67280fdff17ce94064c80e0717d7e102d31aa26aa003a9.exe	30
PID 2756 wrote to memory of 2896	2756	5aac87d916d8ec903c67280fdff17ce94064c80e0717d7e102d31aa26aa003a9.exe	30
PID 2896 wrote to memory of 2652	2896	5aac87d916d8ec903c67280fdff17ce94064c80e0717d7e102d31aa26aa003a9.exe	31
PID 2896 wrote to memory of 2652	2896	5aac87d916d8ec903c67280fdff17ce94064c80e0717d7e102d31aa26aa003a9.exe	31
PID 2896 wrote to memory of 2652	2896	5aac87d916d8ec903c67280fdff17ce94064c80e0717d7e102d31aa26aa003a9.exe	31
PID 2896 wrote to memory of 2652	2896	5aac87d916d8ec903c67280fdff17ce94064c80e0717d7e102d31aa26aa003a9.exe	31

memory/2756-0-0x00000000749DE000-0x00000000749DF000-memory.dmp

Filesize
4KB

Download
memory/2756-1-0x0000000000F20000-0x0000000000FDE000-memory.dmp

Filesize
760KB

Download
memory/2756-2-0x00000000749D0000-0x00000000750BE000-memory.dmp

Filesize
6.9MB

Download
memory/2756-3-0x0000000000B10000-0x0000000000B20000-memory.dmp

Filesize
64KB

Download
memory/2756-4-0x0000000000BB0000-0x0000000000BBC000-memory.dmp

Filesize
48KB

Download
memory/2756-5-0x0000000005580000-0x000000000560A000-memory.dmp

Filesize
552KB

Download
memory/2756-12-0x00000000749D0000-0x00000000750BE000-memory.dmp

Filesize
6.9MB

Download
memory/2896-7-0x0000000000400000-0x0000000000442000-memory.dmp

Filesize
264KB

Download
memory/2896-11-0x0000000000400000-0x0000000000442000-memory.dmp

Filesize
264KB

Download
memory/2896-9-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2896-8-0x0000000000400000-0x0000000000442000-memory.dmp

Filesize
264KB

Download