bc4e6b5f7f8d7765fb865b1dda3803c9a6d53e45777ffdacc5e50b3c7f9b8d9a

Analysis

max time kernel
231s
max time network
335s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
02/12/2022, 04:51

Target
Dr. Fone 11.4.1 Crack Key Torrent (Reg Code) Full Version Downloader.exe
Size 399KB
Sample221202-fgvsfsee95
SHA256 bc4e6b5f7f8d7765fb865b1dda3803c9a6d53e45777ffdacc5e50b3c7f9b8d9a
MD5 27482f80b6d1ed6c898049a68f93a363
SHA1 e067fa6d3937dc8ff5bcd871fd837e4bffa6065b
SHA512 23b1543bb9588cb3f44b14332195133de6e81a7d2847ab5d75f3f8ad435d6b1e36d6ca60e9e24a438c3e058d954e372300fa60abe68137a8531fa4c6d54dd8f9
SSDEEP 12288:k1kWZoqsz7Q/UMbTlOncXSl1Q/jE/21dbb:KsclOcCfQreyxb
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1636	268	WerFault.exe	17

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	268	Dr. Fone 11.4.1 Crack Key Torrent (Reg Code) Full Version Downloader.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 268 wrote to memory of 1636	268	Dr. Fone 11.4.1 Crack Key Torrent (Reg Code) Full Version Downloader.exe	28
PID 268 wrote to memory of 1636	268	Dr. Fone 11.4.1 Crack Key Torrent (Reg Code) Full Version Downloader.exe	28
PID 268 wrote to memory of 1636	268	Dr. Fone 11.4.1 Crack Key Torrent (Reg Code) Full Version Downloader.exe	28

C:\Users\Admin\AppData\Local\Temp\Dr. Fone 11.4.1 Crack Key Torrent (Reg Code) Full Version Downloader.exe
"C:\Users\Admin\AppData\Local\Temp\Dr. Fone 11.4.1 Crack Key Torrent (Reg Code) Full Version Downloader.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:268
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 268 -s 528
  2⤵
  - Program crash
  PID:1636

memory/268-54-0x00000000001C0000-0x0000000000228000-memory.dmp

Download