d79f1e81b70c2549a309d6a1d96485718e7435e07c4f7a761c0201410434d99e

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
22/07/2024, 17:25

Target

NEW ORDER99716.exe
Size

698KB
MD5

5f386e326c1de9fc0f2cc1920b59d6ef
SHA1

eaa7b86fd7011f609c862ec2961b4059d7ad0b88
SHA256

048b95c63729b7ba5758e01301aee59a76dd2eaa09876791de8d19ef13841a88
SHA512

3370fe1910aeeeba1f35d6163c4223c5fe9c5dc9be91952e4acd83205123e65f7983f7e1b7d5f59e82e441f9da678660667635b0b23e585f6571b29f28360b8a
SSDEEP

12288:N82Bb5mmfwK8zC2wAwIk+0+BLsP/d83wwMLIk60RC5pTSOHGuCJtlwqG:e2Bb4XK8+mJBIP/diww7v0RUppHGuu5

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 4876 set thread context of 4080	4876	NEW ORDER99716.exe	93

Suspicious behavior: EnumeratesProcesses 14 IoCs

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 4876 wrote to memory of 4080	4876	NEW ORDER99716.exe	93
PID 4876 wrote to memory of 4080	4876	NEW ORDER99716.exe	93
PID 4876 wrote to memory of 4080	4876	NEW ORDER99716.exe	93
PID 4876 wrote to memory of 4080	4876	NEW ORDER99716.exe	93
PID 4876 wrote to memory of 4080	4876	NEW ORDER99716.exe	93
PID 4876 wrote to memory of 4080	4876	NEW ORDER99716.exe	93

C:\Users\Admin\AppData\Local\Temp\NEW ORDER99716.exe
"C:\Users\Admin\AppData\Local\Temp\NEW ORDER99716.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:4876
- C:\Users\Admin\AppData\Local\Temp\NEW ORDER99716.exe
  "C:\Users\Admin\AppData\Local\Temp\NEW ORDER99716.exe"
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4080

memory/4080-10-0x0000000000400000-0x0000000000446000-memory.dmp

Filesize
280KB

Download
memory/4080-15-0x0000000000400000-0x0000000000446000-memory.dmp

Filesize
280KB

Download
memory/4080-14-0x0000000000400000-0x0000000000446000-memory.dmp

Filesize
280KB

Download
memory/4080-13-0x0000000001A60000-0x0000000001DAA000-memory.dmp

Filesize
3.3MB

Download
memory/4876-6-0x0000000005470000-0x000000000548A000-memory.dmp

Filesize
104KB

Download
memory/4876-5-0x0000000005100000-0x000000000510A000-memory.dmp

Filesize
40KB

Download
memory/4876-0-0x000000007501E000-0x000000007501F000-memory.dmp

Filesize
4KB

Download
memory/4876-7-0x00000000054A0000-0x00000000054AE000-memory.dmp

Filesize
56KB

Download
memory/4876-8-0x0000000006350000-0x00000000063DE000-memory.dmp

Filesize
568KB

Download
memory/4876-9-0x0000000008B50000-0x0000000008BEC000-memory.dmp

Filesize
624KB

Download
memory/4876-4-0x0000000075010000-0x00000000757C0000-memory.dmp

Filesize
7.7MB

Download
memory/4876-12-0x0000000075010000-0x00000000757C0000-memory.dmp

Filesize
7.7MB

Download
memory/4876-3-0x0000000005040000-0x00000000050D2000-memory.dmp

Filesize
584KB

Download
memory/4876-2-0x0000000005510000-0x0000000005AB4000-memory.dmp

Filesize
5.6MB

Download
memory/4876-1-0x0000000000590000-0x0000000000644000-memory.dmp

Filesize
720KB

Download