c5958711c87358d92b505eda53dd9f167ac6dcbc0e509b34cbf1c69e2768f46e

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
13/09/2023, 12:50

Target

Setup_Loader v2.1/7zxa.dll
Size

228KB
MD5

983d226045bb3c63e0c1d047428ee17b
SHA1

6a0a74dd68daae4ba5fc8cdf2da963bacd17186a
SHA256

33656242a0d8cce56f6c2abb0ceffbced63a460755fad1dcee36490f904d4809
SHA512

9652fb0fc2666104ee17579df0bc65282d95dd509588a82d7aa1445078f2893067d77199c04d0c84bba8cdb361807efb10f014ddf9f14d07888719b341b87e27
SSDEEP

3072:iEamww2O59NcM8EhzfxvAWZtyv34vwoxCOZOIekwvwCgm4vU2LxPeJKcvewyAW+0:io3r59aEhdC8zx2HX05FJmoMST

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2260	2232	WerFault.exe	11

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2232 wrote to memory of 2260	2232	rundll32.exe	28
PID 2232 wrote to memory of 2260	2232	rundll32.exe	28
PID 2232 wrote to memory of 2260	2232	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Setup_Loader v2.1\7zxa.dll",#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2232
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2232 -s 116
  2⤵
  - Program crash
  PID:2260