d79f1e81b70c2549a309d6a1d96485718e7435e07c4f7a761c0201410434d99e

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
22-07-2024 17:25

Target

NEW ORDER99716.exe
Size

698KB
MD5

5f386e326c1de9fc0f2cc1920b59d6ef
SHA1

eaa7b86fd7011f609c862ec2961b4059d7ad0b88
SHA256

048b95c63729b7ba5758e01301aee59a76dd2eaa09876791de8d19ef13841a88
SHA512

3370fe1910aeeeba1f35d6163c4223c5fe9c5dc9be91952e4acd83205123e65f7983f7e1b7d5f59e82e441f9da678660667635b0b23e585f6571b29f28360b8a
SSDEEP

12288:N82Bb5mmfwK8zC2wAwIk+0+BLsP/d83wwMLIk60RC5pTSOHGuCJtlwqG:e2Bb4XK8+mJBIP/diww7v0RUppHGuu5

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1996 set thread context of 1908	1996	NEW ORDER99716.exe	30

Suspicious behavior: EnumeratesProcesses 7 IoCs

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 1996 wrote to memory of 1908	1996	NEW ORDER99716.exe	30
PID 1996 wrote to memory of 1908	1996	NEW ORDER99716.exe	30
PID 1996 wrote to memory of 1908	1996	NEW ORDER99716.exe	30
PID 1996 wrote to memory of 1908	1996	NEW ORDER99716.exe	30
PID 1996 wrote to memory of 1908	1996	NEW ORDER99716.exe	30
PID 1996 wrote to memory of 1908	1996	NEW ORDER99716.exe	30
PID 1996 wrote to memory of 1908	1996	NEW ORDER99716.exe	30

C:\Users\Admin\AppData\Local\Temp\NEW ORDER99716.exe
"C:\Users\Admin\AppData\Local\Temp\NEW ORDER99716.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:1996
- C:\Users\Admin\AppData\Local\Temp\NEW ORDER99716.exe
  "C:\Users\Admin\AppData\Local\Temp\NEW ORDER99716.exe"
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1908

memory/1908-8-0x0000000000400000-0x0000000000446000-memory.dmp

Filesize
280KB

Download
memory/1908-10-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/1908-16-0x0000000000400000-0x0000000000446000-memory.dmp

Filesize
280KB

Download
memory/1908-15-0x0000000000400000-0x0000000000446000-memory.dmp

Filesize
280KB

Download
memory/1908-14-0x0000000000C70000-0x0000000000F73000-memory.dmp

Filesize
3.0MB

Download
memory/1908-12-0x0000000000400000-0x0000000000446000-memory.dmp

Filesize
280KB

Download
memory/1908-6-0x0000000000400000-0x0000000000446000-memory.dmp

Filesize
280KB

Download
memory/1996-1-0x0000000000BB0000-0x0000000000C64000-memory.dmp

Filesize
720KB

Download
memory/1996-13-0x0000000074A00000-0x00000000750EE000-memory.dmp

Filesize
6.9MB

Download
memory/1996-0-0x0000000074A0E000-0x0000000074A0F000-memory.dmp

Filesize
4KB

Download
memory/1996-5-0x0000000004DE0000-0x0000000004E6E000-memory.dmp

Filesize
568KB

Download
memory/1996-4-0x0000000000B90000-0x0000000000B9E000-memory.dmp

Filesize
56KB

Download
memory/1996-3-0x0000000000B30000-0x0000000000B4A000-memory.dmp

Filesize
104KB

Download
memory/1996-2-0x0000000074A00000-0x00000000750EE000-memory.dmp

Filesize
6.9MB

Download