3e8f6dba2a8b7a53ffad7b90f42d4dfdc3a3e616b45ba4cc01a97e34e6871b67

Resubmissions

20/07/2023, 01:13

17/07/2023, 08:45

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
17/07/2023, 08:45

Target

SSEAR.exe
Size

4.5MB
MD5

58b9f260ef3b531ebd9db11650f005e9
SHA1

2a64ed7a283502757c26288b135daec73fe22c9c
SHA256

3e8f6dba2a8b7a53ffad7b90f42d4dfdc3a3e616b45ba4cc01a97e34e6871b67
SHA512

c249c66866f8aba51358621ffe5744b16096e0f99e6a5f61592a808e9936cb6d65934e03718124cc09e6920cebe9341bfe38343e1b0031dd7bf2f6b47d50b9cc
SSDEEP

49152:rsAr6LQNXWzmrbGQO9MmHlvsLpxgiTFBcQ5+vBh1+k:pXZ+QO9MgiTFBQ1f

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2948	2204	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2204 wrote to memory of 2948	2204	SSEAR.exe	28
PID 2204 wrote to memory of 2948	2204	SSEAR.exe	28
PID 2204 wrote to memory of 2948	2204	SSEAR.exe	28
PID 2204 wrote to memory of 2948	2204	SSEAR.exe	28

C:\Users\Admin\AppData\Local\Temp\SSEAR.exe
"C:\Users\Admin\AppData\Local\Temp\SSEAR.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2204
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2204 -s 836
  2⤵
  - Program crash
  PID:2948

memory/2204-54-0x0000000000270000-0x00000000006F8000-memory.dmp

Filesize
4.5MB

Download
memory/2204-55-0x00000000745C0000-0x0000000074CAE000-memory.dmp

Filesize
6.9MB

Download
memory/2204-56-0x00000000050E0000-0x0000000005120000-memory.dmp

Filesize
256KB

Download
memory/2204-57-0x00000000050E0000-0x0000000005120000-memory.dmp

Filesize
256KB

Download
memory/2204-73-0x00000000745C0000-0x0000000074CAE000-memory.dmp

Filesize
6.9MB

Download
memory/2204-74-0x00000000050E0000-0x0000000005120000-memory.dmp

Filesize
256KB

Download
memory/2204-75-0x00000000050E0000-0x0000000005120000-memory.dmp

Filesize
256KB

Download
memory/2204-76-0x00000000050E0000-0x0000000005120000-memory.dmp

Filesize
256KB

Download