59d5412f88aeb75bdef6e83718e462d5d4ebef32daf56fbe8ae74b170a0d1aba

Analysis

max time kernel
119s
max time network
122s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
26/08/2023, 13:57

Target

a2babf45dd2e1a13ceafab01e02735f8_mafia_JC.exe
Size

977KB
MD5

a2babf45dd2e1a13ceafab01e02735f8
SHA1

48448cd94fba4fd0476e61219dd893564df4f6aa
SHA256

59d5412f88aeb75bdef6e83718e462d5d4ebef32daf56fbe8ae74b170a0d1aba
SHA512

058183ec319d38448002509d7305b63c8e2628a64b6dcfce99a946f268ac84050ce3d67844fa30194a2ce51b1c2d9bf108d0a9f316f7ff2402784e5c51598462
SSDEEP

24576:3JU1aJsTOZ6X/fRIRb3Dlbnjs4wfsv4MzGz7R:ZU1B03DJjs4w5MzG5

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1936	2376	WerFault.exe	21

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2376 wrote to memory of 1936	2376	a2babf45dd2e1a13ceafab01e02735f8_mafia_JC.exe	28
PID 2376 wrote to memory of 1936	2376	a2babf45dd2e1a13ceafab01e02735f8_mafia_JC.exe	28
PID 2376 wrote to memory of 1936	2376	a2babf45dd2e1a13ceafab01e02735f8_mafia_JC.exe	28
PID 2376 wrote to memory of 1936	2376	a2babf45dd2e1a13ceafab01e02735f8_mafia_JC.exe	28

C:\Users\Admin\AppData\Local\Temp\a2babf45dd2e1a13ceafab01e02735f8_mafia_JC.exe
"C:\Users\Admin\AppData\Local\Temp\a2babf45dd2e1a13ceafab01e02735f8_mafia_JC.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2376
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2376 -s 44
  2⤵
  - Program crash
  PID:1936

memory/2376-2-0x0000000001210000-0x0000000001313000-memory.dmp

Filesize
1.0MB

Download
memory/2376-1-0x0000000001210000-0x0000000001313000-memory.dmp

Filesize
1.0MB

Download
memory/2376-0-0x0000000001210000-0x0000000001313000-memory.dmp

Filesize
1.0MB

Download
memory/2376-3-0x0000000001210000-0x0000000001313000-memory.dmp

Filesize
1.0MB

Download