8a3936e45bd60687bff4c3ca2ba48445b56c58cb40250610edf06bae9fdbbd52

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
24/08/2023, 19:36

Target

8c01602c4c29173f7c08a5ac0d431cac_mafia_JC.exe
Size

2.4MB
MD5

8c01602c4c29173f7c08a5ac0d431cac
SHA1

3674ccfceba5e2baedac55bb6e1778ef36816be9
SHA256

8a3936e45bd60687bff4c3ca2ba48445b56c58cb40250610edf06bae9fdbbd52
SHA512

d325bb3b49120f27b472ecef53341f9544f7a5fef08fe76e3105dc426d896dc7e974ca6181ccd010c1aa1c06dae2f1c2d0517e8945a54d8935ad44299fbf1f9f
SSDEEP

24576:CHTAaTKyDeYHcNKmFwFtC9lDywbA+koG0tgn5bpiMVE4dHf/aupHDaj9t8Dyu5aE:1XgUtMVE4d//y97rLfTMk/hqK5LYDj

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2276	2204	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2204 wrote to memory of 2276	2204	8c01602c4c29173f7c08a5ac0d431cac_mafia_JC.exe	28
PID 2204 wrote to memory of 2276	2204	8c01602c4c29173f7c08a5ac0d431cac_mafia_JC.exe	28
PID 2204 wrote to memory of 2276	2204	8c01602c4c29173f7c08a5ac0d431cac_mafia_JC.exe	28
PID 2204 wrote to memory of 2276	2204	8c01602c4c29173f7c08a5ac0d431cac_mafia_JC.exe	28

C:\Users\Admin\AppData\Local\Temp\8c01602c4c29173f7c08a5ac0d431cac_mafia_JC.exe
"C:\Users\Admin\AppData\Local\Temp\8c01602c4c29173f7c08a5ac0d431cac_mafia_JC.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2204
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2204 -s 168
  2⤵
  - Program crash
  PID:2276