11f1ebba29832b7c760ce530a3173cfc1de55a29fb06a2684cdbb67a264141cf

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
28/08/2023, 13:39

Target

SecuriteInfo.com.Trojan.PackedNET.2290.21484.29942.exe
Size

740KB
MD5

ae42b9195e12c5c8702b56c0f64d10f6
SHA1

a6fad6e64f203f75df825aff09b1934f03aa1ba9
SHA256

11f1ebba29832b7c760ce530a3173cfc1de55a29fb06a2684cdbb67a264141cf
SHA512

6f3437a6e2da3ea6b66b5334b984e4997e34d76048625f55cf9f966d47eb09c70b17889ac11436b2a7239154f3bdaf8615f28897fae597886f7a314947f16129
SSDEEP

12288:crNh+xGb/8mI7nK61T+T+dvmg87+Aj0LTfz9c3O7VLr6S5F7cJ/+IIxiAnt:Oh18mI7FT+TYK/jgb2yVLGSu/pIgAn

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2836	1780	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1780 wrote to memory of 2836	1780	SecuriteInfo.com.Trojan.PackedNET.2290.21484.29942.exe	30
PID 1780 wrote to memory of 2836	1780	SecuriteInfo.com.Trojan.PackedNET.2290.21484.29942.exe	30
PID 1780 wrote to memory of 2836	1780	SecuriteInfo.com.Trojan.PackedNET.2290.21484.29942.exe	30
PID 1780 wrote to memory of 2836	1780	SecuriteInfo.com.Trojan.PackedNET.2290.21484.29942.exe	30

C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.PackedNET.2290.21484.29942.exe
"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.PackedNET.2290.21484.29942.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1780
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1780 -s 664
  2⤵
  - Program crash
  PID:2836

memory/1780-0-0x0000000000F60000-0x0000000001020000-memory.dmp

Filesize
768KB

Download
memory/1780-1-0x0000000074A70000-0x000000007515E000-memory.dmp

Filesize
6.9MB

Download
memory/1780-2-0x0000000000610000-0x0000000000650000-memory.dmp

Filesize
256KB

Download
memory/1780-3-0x00000000005F0000-0x000000000060A000-memory.dmp

Filesize
104KB

Download
memory/1780-4-0x0000000074A70000-0x000000007515E000-memory.dmp

Filesize
6.9MB

Download
memory/1780-5-0x0000000000610000-0x0000000000650000-memory.dmp

Filesize
256KB

Download
memory/1780-6-0x0000000000690000-0x000000000069E000-memory.dmp

Filesize
56KB

Download