a9ef39d7501a782e9b918cb944ddca2b4475f3671f9a0898dff55c14f8ef5ff8

Analysis

max time kernel
118s
max time network
121s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
03/08/2023, 15:32

Target

49d7ea8a6494b2d00f958483ae5a19a4_mafia_JC.exe
Size

3.8MB
MD5

49d7ea8a6494b2d00f958483ae5a19a4
SHA1

66a74925a7b244233b7abc29d4b0ed283f0827b2
SHA256

a9ef39d7501a782e9b918cb944ddca2b4475f3671f9a0898dff55c14f8ef5ff8
SHA512

02126c505926dd61c341cc96878a7bdfed3e926aef461569ef05fddf61070ae72ae0bf6aab43b71e300dbb7150f69dca7e174f8932457c546ecdd2b9e68d9a1a
SSDEEP

98304:jgWR746uh0hQssV7C6YumiQdTJY3Pv9rj+7y0n7AOd2y:jgWRhWWWm7Cv9rj+7MT

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1988	2236	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2236 wrote to memory of 1988	2236	49d7ea8a6494b2d00f958483ae5a19a4_mafia_JC.exe	28
PID 2236 wrote to memory of 1988	2236	49d7ea8a6494b2d00f958483ae5a19a4_mafia_JC.exe	28
PID 2236 wrote to memory of 1988	2236	49d7ea8a6494b2d00f958483ae5a19a4_mafia_JC.exe	28
PID 2236 wrote to memory of 1988	2236	49d7ea8a6494b2d00f958483ae5a19a4_mafia_JC.exe	28

C:\Users\Admin\AppData\Local\Temp\49d7ea8a6494b2d00f958483ae5a19a4_mafia_JC.exe
"C:\Users\Admin\AppData\Local\Temp\49d7ea8a6494b2d00f958483ae5a19a4_mafia_JC.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2236
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2236 -s 228
  2⤵
  - Program crash
  PID:1988