e56368d6f1852d0ecf1581337ce8bfd07fe53c616004ff654b1d1714acc5f299

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
03-09-2023 14:09

Target

2023-08-22_efe2cfd3103725f93a6c5ab8d231821f_mafia_JC.exe
Size

354KB
MD5

efe2cfd3103725f93a6c5ab8d231821f
SHA1

cbc2142bc03faaeea6065f3ec1ea2010458d1c58
SHA256

e56368d6f1852d0ecf1581337ce8bfd07fe53c616004ff654b1d1714acc5f299
SHA512

7fda1a982a3a104d78b01b60cee17e2979baaad2422a511f6d70d426f99cc2250820d2a217aef9f1ce84deece4e8e586204d1c1dbcb5b1c9906ceb4883ad2289
SSDEEP

6144:/rvkfHnWovSb3LfALGcYTexa9ElV8ef1WVTIC5O/bCO6JlzUl:/ronWF3Lf9KxQEl2ekVTH5O/j6f

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2716	1728	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1728 wrote to memory of 2716	1728	2023-08-22_efe2cfd3103725f93a6c5ab8d231821f_mafia_JC.exe	28
PID 1728 wrote to memory of 2716	1728	2023-08-22_efe2cfd3103725f93a6c5ab8d231821f_mafia_JC.exe	28
PID 1728 wrote to memory of 2716	1728	2023-08-22_efe2cfd3103725f93a6c5ab8d231821f_mafia_JC.exe	28
PID 1728 wrote to memory of 2716	1728	2023-08-22_efe2cfd3103725f93a6c5ab8d231821f_mafia_JC.exe	28

C:\Users\Admin\AppData\Local\Temp\2023-08-22_efe2cfd3103725f93a6c5ab8d231821f_mafia_JC.exe
"C:\Users\Admin\AppData\Local\Temp\2023-08-22_efe2cfd3103725f93a6c5ab8d231821f_mafia_JC.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1728
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1728 -s 120
  2⤵
  - Program crash
  PID:2716