42cc34d4ba23111d3e3e38bbbc10131205af49e6c1029a8327d22f2e4d5e0ba2

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
19/08/2023, 12:53

Target

3ee98502576bb75bbd3d23f6badd7950_mafia_JC.exe
Size

467KB
MD5

3ee98502576bb75bbd3d23f6badd7950
SHA1

bc89c531473eb1e01ef97b9a555d58d9a7b8e5fa
SHA256

42cc34d4ba23111d3e3e38bbbc10131205af49e6c1029a8327d22f2e4d5e0ba2
SHA512

02fb63a2ebd9e0f0994913762f037dde5fa36e56e747ddd00c00aedbc026f1af0753527318c0d56724ced3cc2a53f4d5c3a574773d2c953d1ebb9ccaed6bca5e
SSDEEP

12288:GMqFYULoWzniwtgGbl6mw/YAMOtwhF5JBqyhCnGe+:GMqFbniCgGZ6T/DMO25JzcnGd

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2980	2256	WerFault.exe	21

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2256 wrote to memory of 2980	2256	3ee98502576bb75bbd3d23f6badd7950_mafia_JC.exe	28
PID 2256 wrote to memory of 2980	2256	3ee98502576bb75bbd3d23f6badd7950_mafia_JC.exe	28
PID 2256 wrote to memory of 2980	2256	3ee98502576bb75bbd3d23f6badd7950_mafia_JC.exe	28
PID 2256 wrote to memory of 2980	2256	3ee98502576bb75bbd3d23f6badd7950_mafia_JC.exe	28

C:\Users\Admin\AppData\Local\Temp\3ee98502576bb75bbd3d23f6badd7950_mafia_JC.exe
"C:\Users\Admin\AppData\Local\Temp\3ee98502576bb75bbd3d23f6badd7950_mafia_JC.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2256
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2256 -s 144
  2⤵
  - Program crash
  PID:2980