b081bb2648bf9d1a2a5d1f9c714020b48211b3da77ef881e59eb3526c2d6c2a3

Analysis

user interaction
yes
max time kernel
298s
max time network
204s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-es
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-eslocale:es-esos:windows10-ltsc_2021-x64systemwindows
submitted
10/08/2026, 04:34

Target
build mod_crypted.exe
Size 22.3MB
Sample260810-e7e91sbj8y
SHA256 b081bb2648bf9d1a2a5d1f9c714020b48211b3da77ef881e59eb3526c2d6c2a3
MD5 478fbec24572339d312b226d468539fc
SHA1 bc0d8c02805b5271ff2a7c73e20a6eaf6631aee4
SHA512 ac88f7ed90bbf53ae79c9000304cc821c961d6bcdbe600ec9e3266be731f184cab36f4aa4013d3b487469acafd801f671c6a9847060136dd3cfbe32ade255923
SSDEEP 393216:HPrfkvrxPTUUZiH+EScnVV8AqPhh1HXLqslj9EBRvg9gKhc1rNnI:zUrZtZJ3c0AczZbx9EBRMN
TLSH
T1DC3733B0806394D6FF08AAB30D78960F6F1DED11642D9F19292F8A15164FEA09773CF6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 4628 set thread context of 4972	4628	build mod_crypted.exe	83

Suspicious use of WriteProcessMemory 9 IoCs

description	pid	Process	procid_target
PID 4628 wrote to memory of 4972	4628	build mod_crypted.exe	83
PID 4628 wrote to memory of 4972	4628	build mod_crypted.exe	83
PID 4628 wrote to memory of 4972	4628	build mod_crypted.exe	83
PID 4628 wrote to memory of 4972	4628	build mod_crypted.exe	83
PID 4628 wrote to memory of 4972	4628	build mod_crypted.exe	83
PID 4628 wrote to memory of 4972	4628	build mod_crypted.exe	83
PID 4628 wrote to memory of 4972	4628	build mod_crypted.exe	83
PID 4628 wrote to memory of 4972	4628	build mod_crypted.exe	83
PID 4628 wrote to memory of 4972	4628	build mod_crypted.exe	83

memory/4628-1-0x00007FF6F8C40000-0x00007FF6FA28A000-memory.dmp

Download

memory/4972-0-0x0000000140000000-0x000000014005C000-memory.dmp

Download