360e36de0866425ffd67793c53dfcd0aa9fa371f37eb1800c1ad56bac35c684d

Analysis

max time kernel
91s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
11/10/2022, 05:15

Target

360e36de0866425ffd67793c53dfcd0aa9fa371f37eb1800c1ad56bac35c684d.exe
Size

68KB
MD5

5f5acdde601dbd32b4d761ce6d66d5dd
SHA1

19650425d3d7275ca50f7ba3c70a59fda82760fb
SHA256

360e36de0866425ffd67793c53dfcd0aa9fa371f37eb1800c1ad56bac35c684d
SHA512

e40125599bc7449c4c3ce970fafdb020e9fd5fedd6f1c854b71d8c6ed99d36368587b125eba0df5a0f7327065c55d63d9e7163e74051aab5cf97ae893263a773
SSDEEP

768:I4hZ1p/ija+1IGpFrSoy35TPITCawd/mW:I4hZWRxWNrJdv

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1448 wrote to memory of 4856	1448	360e36de0866425ffd67793c53dfcd0aa9fa371f37eb1800c1ad56bac35c684d.exe	83
PID 1448 wrote to memory of 4856	1448	360e36de0866425ffd67793c53dfcd0aa9fa371f37eb1800c1ad56bac35c684d.exe	83
PID 1448 wrote to memory of 4856	1448	360e36de0866425ffd67793c53dfcd0aa9fa371f37eb1800c1ad56bac35c684d.exe	83

C:\Users\Admin\AppData\Local\Temp\360e36de0866425ffd67793c53dfcd0aa9fa371f37eb1800c1ad56bac35c684d.exe
"C:\Users\Admin\AppData\Local\Temp\360e36de0866425ffd67793c53dfcd0aa9fa371f37eb1800c1ad56bac35c684d.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1448
- C:\Windows\SysWOW64\cmd.exe
  cmd /c del "C:\Users\Admin\AppData\Local\Temp\360e36de0866425ffd67793c53dfcd0aa9fa371f37eb1800c1ad56bac35c684d.exe"
  2⤵
  PID:4856

C:\Windows\system32\WerFault.exe
"C:\Windows\system32\WerFault.exe" -k -l WATCHDOG WATCHDOG-20221011-0923.dmp
1⤵
PID:4928

memory/1448-132-0x0000000000400000-0x0000000000411000-memory.dmp

Filesize
68KB

Download
memory/1448-134-0x0000000000400000-0x0000000000411000-memory.dmp

Filesize
68KB

Download