4b58bbd1d928427322f27dcd7e6591f21312fed4b8871288246937cd8a91f666

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
15-08-2023 16:51

Target

f9c8b7a3fa19aa73ea7b32e4268eba8f_mafia_JC.exe
Size

978KB
MD5

f9c8b7a3fa19aa73ea7b32e4268eba8f
SHA1

e797d4f1d0b95f38ec08d4b7c375ea58c37fc8a0
SHA256

4b58bbd1d928427322f27dcd7e6591f21312fed4b8871288246937cd8a91f666
SHA512

e1320386b7c67e18665b84d026e3fe139e260f244987611757ae258419c3ddf1af7c64d0a4cd7a697cfc98bd24e9b9b02b77e146acbc0556f734dab222800b6d
SSDEEP

24576:6YsdpnTQNT1h7NWrgovNg+f4lScKOS2TAuf:5sdesv+s4lIYf

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2244	2224	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2224 wrote to memory of 2244	2224	f9c8b7a3fa19aa73ea7b32e4268eba8f_mafia_JC.exe	28
PID 2224 wrote to memory of 2244	2224	f9c8b7a3fa19aa73ea7b32e4268eba8f_mafia_JC.exe	28
PID 2224 wrote to memory of 2244	2224	f9c8b7a3fa19aa73ea7b32e4268eba8f_mafia_JC.exe	28
PID 2224 wrote to memory of 2244	2224	f9c8b7a3fa19aa73ea7b32e4268eba8f_mafia_JC.exe	28

C:\Users\Admin\AppData\Local\Temp\f9c8b7a3fa19aa73ea7b32e4268eba8f_mafia_JC.exe
"C:\Users\Admin\AppData\Local\Temp\f9c8b7a3fa19aa73ea7b32e4268eba8f_mafia_JC.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2224
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2224 -s 36
  2⤵
  - Program crash
  PID:2244

memory/2224-54-0x00000000013D0000-0x00000000014D4000-memory.dmp

Filesize
1.0MB

Download
memory/2224-55-0x00000000013D0000-0x00000000014D4000-memory.dmp

Filesize
1.0MB

Download
memory/2224-56-0x00000000013D0000-0x00000000014D4000-memory.dmp

Filesize
1.0MB

Download
memory/2224-57-0x00000000013D0000-0x00000000014D4000-memory.dmp

Filesize
1.0MB

Download
memory/2224-58-0x00000000013D0000-0x00000000014D4000-memory.dmp

Filesize
1.0MB

Download