7a52118eaab5b066685194f3dbade66f756287baa42022697d422f4a8f6b7043

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
31/08/2023, 16:41

Target

f575f3d505f8bc0700e3f60acbd88b28_mafia_JC.exe
Size

855KB
MD5

f575f3d505f8bc0700e3f60acbd88b28
SHA1

7c609e00ca509cd28328c23dc8c299f7bde72c80
SHA256

7a52118eaab5b066685194f3dbade66f756287baa42022697d422f4a8f6b7043
SHA512

599822fbe48b275e677b4de10345d05c02a4ccd994cbf4648a2998346ea978e731928dd848bb082116cc5c389062225baeb4532cf47683abebb896dbef3df9c5
SSDEEP

24576:23sBfLy/pVOHf+GcIHZsoDtT044v/8Vcn21hWB8PTf:hLjFHZsCT044v/rn21hWif

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2204	1568	WerFault.exe	24

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1568 wrote to memory of 2204	1568	f575f3d505f8bc0700e3f60acbd88b28_mafia_JC.exe	28
PID 1568 wrote to memory of 2204	1568	f575f3d505f8bc0700e3f60acbd88b28_mafia_JC.exe	28
PID 1568 wrote to memory of 2204	1568	f575f3d505f8bc0700e3f60acbd88b28_mafia_JC.exe	28
PID 1568 wrote to memory of 2204	1568	f575f3d505f8bc0700e3f60acbd88b28_mafia_JC.exe	28

C:\Users\Admin\AppData\Local\Temp\f575f3d505f8bc0700e3f60acbd88b28_mafia_JC.exe
"C:\Users\Admin\AppData\Local\Temp\f575f3d505f8bc0700e3f60acbd88b28_mafia_JC.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1568
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1568 -s 96
  2⤵
  - Program crash
  PID:2204

memory/1568-0-0x00000000002E0000-0x00000000003C1E6C-memory.dmp

Filesize
903KB

Download
memory/1568-1-0x00000000002E0000-0x00000000003C1E6C-memory.dmp

Filesize
903KB

Download
memory/1568-2-0x00000000002E0000-0x00000000003C1E6C-memory.dmp

Filesize
903KB

Download
memory/1568-3-0x00000000002E0000-0x00000000003C1E6C-memory.dmp

Filesize
903KB

Download
memory/1568-4-0x00000000002E0000-0x00000000003C1E6C-memory.dmp

Filesize
903KB

Download