7ca4c61f8d0fb35a48e8d2504faaa34379cf71da9feb677e897d5d75c1596ae1

Analysis

max time kernel
145s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
21-11-2022 15:28

Target

7ca4c61f8d0fb35a48e8d2504faaa34379cf71da9feb677e897d5d75c1596ae1.exe
Size

27KB
MD5

337da570f840166011a8f70830fdc930
SHA1

aa58cd3c4198463b7e795a5ea70327b15ebf72be
SHA256

7ca4c61f8d0fb35a48e8d2504faaa34379cf71da9feb677e897d5d75c1596ae1
SHA512

c3ed4579632798f2e785bb49b96ed29b9143eda589a03c1f68479839b6b4bf739f8c6858f1ad24f7053f63770491ab6a0aa64b6c87b79c48d17c533c4d2b0fc8
SSDEEP

384:8LhUKQaQx1s7ftKTkSze/oVY3goP9w1Hx+aGHk4ZQybPp1GHZ:ijQaQx1s78TkSa/2Yh9w3+a94ZQI3E

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 4348 set thread context of 4700	4348	7ca4c61f8d0fb35a48e8d2504faaa34379cf71da9feb677e897d5d75c1596ae1.exe	83

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 4348 wrote to memory of 4700	4348	7ca4c61f8d0fb35a48e8d2504faaa34379cf71da9feb677e897d5d75c1596ae1.exe	83
PID 4348 wrote to memory of 4700	4348	7ca4c61f8d0fb35a48e8d2504faaa34379cf71da9feb677e897d5d75c1596ae1.exe	83
PID 4348 wrote to memory of 4700	4348	7ca4c61f8d0fb35a48e8d2504faaa34379cf71da9feb677e897d5d75c1596ae1.exe	83
PID 4348 wrote to memory of 4700	4348	7ca4c61f8d0fb35a48e8d2504faaa34379cf71da9feb677e897d5d75c1596ae1.exe	83
PID 4348 wrote to memory of 4700	4348	7ca4c61f8d0fb35a48e8d2504faaa34379cf71da9feb677e897d5d75c1596ae1.exe	83

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 4700 -ip 4700
1⤵
PID:3196

memory/4348-134-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/4700-133-0x0000000000400000-0x0000000000405000-memory.dmp

Filesize
20KB

Download