6ac7636066bda5b103e73d9e53fd9f5efb587163ebea6c48b3f9377ad28ceccb

Resubmissions

23/09/2022, 04:22

23/09/2022, 04:21

max time kernel
44s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
23/09/2022, 04:21

Target

Spytify.exe
Size

1.1MB
MD5

ca40952963e976b10c6c6b0fbc4ba043
SHA1

fd7f3f42e0c94e5d3dc985c3aac9d6c2ac30073c
SHA256

6ac7636066bda5b103e73d9e53fd9f5efb587163ebea6c48b3f9377ad28ceccb
SHA512

8bca02789dae91fd04a26aa50f0abe192fb17d93d52d2e869bb9096b96895174985c4e28ef3da5ef90bc40da81011c24cce8c49b804bc2a6de943a9ad65cd647
SSDEEP

6144:lotULhuDrMhr/39FwChM+nwlowp7lwGJg0IbJ3oZZmRwisCi1BexJoCi1BaWJfu9:lowrnNFiEnVfJB2futUnCVNhlFpxjfr

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1776	1092	WerFault.exe	26

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1092 wrote to memory of 1776	1092	Spytify.exe	27
PID 1092 wrote to memory of 1776	1092	Spytify.exe	27
PID 1092 wrote to memory of 1776	1092	Spytify.exe	27

C:\Users\Admin\AppData\Local\Temp\Spytify.exe
"C:\Users\Admin\AppData\Local\Temp\Spytify.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1092
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 1092 -s 524
  2⤵
  - Program crash
  PID:1776

memory/1092-54-0x0000000000B10000-0x0000000000C22000-memory.dmp

Filesize
1.1MB

Download