af69aa9707671b97b5d793fb3ddae9cd2bd43037f9ec5484c19f32d87c55d4d6

Resubmissions

25/11/2022, 21:19

25/11/2022, 21:17

max time kernel
54s
max time network
34s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
25/11/2022, 21:17

Target

Loders Cheats EFT/The identifier.dll
Size

27KB
MD5

e075673a4f1ad47aa0f8f8f05db185a0
SHA1

f015996b7d6202ac10c3e55c177f5eeae8c7d643
SHA256

9748d46f3ae1ca0cf37838488cce66fa8de0b7fc4ecc83b099a8ce753f0811f6
SHA512

b8fddb80c742b7ffe4ef122d01004b926dc9a98e2444c7e577a2db15637853ca7be177b5bfbb2ce8ca096bd9c15fcbbafe8818ce866d202e537d13ac19923fcc
SSDEEP

384:pDFxSg0XTX1/M1Xif3CNO1zJHdmdb9VY9auM609WC6sgMWN+uUrh/i5qKPCwDL1D:pzUM1lOQd4MWN+ucaUKPCwDL1rUTwx

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1376	1992	WerFault.exe	20

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1992 wrote to memory of 1376	1992	rundll32.exe	28
PID 1992 wrote to memory of 1376	1992	rundll32.exe	28
PID 1992 wrote to memory of 1376	1992	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Loders Cheats EFT\The identifier.dll",#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1992
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 1992 -s 92
  2⤵
  - Program crash
  PID:1376