9337ee139460feab21b4b2add7fd9591ac946b5855728eebbd2ddf6280e198ae

Analysis

max time kernel
33s
max time network
17s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
19/07/2024, 20:45

Target

070158830c2983038611a6cf90083de0N.exe
Size

804KB
MD5

070158830c2983038611a6cf90083de0
SHA1

4542734b1ab2ff2b8ec2d3f9f896c2dd2f878279
SHA256

9337ee139460feab21b4b2add7fd9591ac946b5855728eebbd2ddf6280e198ae
SHA512

5ea6b4490b17d2858ecc77e252af6451a6c789096d57392b23ccf9e723e98a867d08b7f5da588db5f75cd170def8d7b60ffa4304a151003059ea7e59999a57c8
SSDEEP

24576:cLo1+QazkcE3yL3/cVu3mSK7LAmjUhCxvJC+CJ:cgf3+EUW97LhjUhyCvJ

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2116 set thread context of 2536	2116	070158830c2983038611a6cf90083de0N.exe	30

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1184	2536	WerFault.exe	30

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
2536	070158830c2983038611a6cf90083de0N.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2116 wrote to memory of 2536	2116	070158830c2983038611a6cf90083de0N.exe	30
PID 2116 wrote to memory of 2536	2116	070158830c2983038611a6cf90083de0N.exe	30
PID 2116 wrote to memory of 2536	2116	070158830c2983038611a6cf90083de0N.exe	30
PID 2116 wrote to memory of 2536	2116	070158830c2983038611a6cf90083de0N.exe	30
PID 2116 wrote to memory of 2536	2116	070158830c2983038611a6cf90083de0N.exe	30
PID 2116 wrote to memory of 2536	2116	070158830c2983038611a6cf90083de0N.exe	30
PID 2116 wrote to memory of 2536	2116	070158830c2983038611a6cf90083de0N.exe	30
PID 2536 wrote to memory of 1184	2536	070158830c2983038611a6cf90083de0N.exe	31
PID 2536 wrote to memory of 1184	2536	070158830c2983038611a6cf90083de0N.exe	31
PID 2536 wrote to memory of 1184	2536	070158830c2983038611a6cf90083de0N.exe	31
PID 2536 wrote to memory of 1184	2536	070158830c2983038611a6cf90083de0N.exe	31

memory/2116-13-0x0000000074D20000-0x000000007540E000-memory.dmp

Filesize
6.9MB

Download
memory/2116-1-0x00000000011C0000-0x0000000001290000-memory.dmp

Filesize
832KB

Download
memory/2116-2-0x0000000074D20000-0x000000007540E000-memory.dmp

Filesize
6.9MB

Download
memory/2116-3-0x00000000003E0000-0x00000000003F0000-memory.dmp

Filesize
64KB

Download
memory/2116-4-0x0000000000480000-0x000000000048E000-memory.dmp

Filesize
56KB

Download
memory/2116-5-0x0000000004C50000-0x0000000004CDE000-memory.dmp

Filesize
568KB

Download
memory/2116-0-0x0000000074D2E000-0x0000000074D2F000-memory.dmp

Filesize
4KB

Download
memory/2536-7-0x0000000000400000-0x0000000000446000-memory.dmp

Filesize
280KB

Download
memory/2536-10-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2536-8-0x0000000000400000-0x0000000000446000-memory.dmp

Filesize
280KB

Download
memory/2536-12-0x0000000000400000-0x0000000000446000-memory.dmp

Filesize
280KB

Download
memory/2536-14-0x0000000000850000-0x0000000000B53000-memory.dmp

Filesize
3.0MB

Download
memory/2536-15-0x0000000000400000-0x0000000000446000-memory.dmp

Filesize
280KB

Download