3510aec49416b1e42f8958c4dbd7cf3b8aaa124b2a3d39cfe4829f943f67ac64

Resubmissions

07-07-2022 07:45

25-03-2022 07:12

Target

3048_1647779912_8762.exe
Size

566KB
MD5

556af53c178fa835be6aa971630a23c6
SHA1

f34c646fe356772477d4f2e4226596b8bed40cca
SHA256

3510aec49416b1e42f8958c4dbd7cf3b8aaa124b2a3d39cfe4829f943f67ac64
SHA512

d73979b5f20b1e759d695f55ff046831e715a1efd981f77af6fce572a6717656be60b36805fdb58b50592fc7d7641c8431fb5e946d8f793fb5e45ec1c0f600bc

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1956 set thread context of 3164	1956	3048_1647779912_8762.exe	79

Program crash 1 IoCs

pid	pid_target	Process	procid_target
396	3164	WerFault.exe	79

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 1956 wrote to memory of 3164	1956	3048_1647779912_8762.exe	79
PID 1956 wrote to memory of 3164	1956	3048_1647779912_8762.exe	79
PID 1956 wrote to memory of 3164	1956	3048_1647779912_8762.exe	79
PID 1956 wrote to memory of 3164	1956	3048_1647779912_8762.exe	79
PID 1956 wrote to memory of 3164	1956	3048_1647779912_8762.exe	79
PID 1956 wrote to memory of 3164	1956	3048_1647779912_8762.exe	79
PID 1956 wrote to memory of 3164	1956	3048_1647779912_8762.exe	79
PID 1956 wrote to memory of 3164	1956	3048_1647779912_8762.exe	79
PID 1956 wrote to memory of 3164	1956	3048_1647779912_8762.exe	79
PID 1956 wrote to memory of 3164	1956	3048_1647779912_8762.exe	79

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 3164 -ip 3164
1⤵
PID:4544

memory/1956-130-0x0000000000510000-0x00000000005A4000-memory.dmp

Filesize
592KB

Download
memory/1956-131-0x00000000054D0000-0x0000000005A74000-memory.dmp

Filesize
5.6MB

Download
memory/1956-132-0x0000000004FC0000-0x0000000005052000-memory.dmp

Filesize
584KB

Download
memory/1956-133-0x0000000004F60000-0x0000000004F6A000-memory.dmp

Filesize
40KB

Download
memory/1956-134-0x0000000005250000-0x00000000052C6000-memory.dmp

Filesize
472KB

Download
memory/1956-135-0x00000000051C0000-0x00000000051DE000-memory.dmp

Filesize
120KB

Download
memory/3164-137-0x0000000000400000-0x000000000048D000-memory.dmp

Filesize
564KB

Download
memory/3164-138-0x0000000000400000-0x000000000048D000-memory.dmp

Filesize
564KB

Download
memory/3164-139-0x0000000000400000-0x000000000048D000-memory.dmp

Filesize
564KB

Download