dd5c3c014a39f8c6e1dd66dd7bad99686d8bb31a178557cb75d3c86b563b0ac5

Analysis

max time kernel
122s
max time network
124s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
30/09/2023, 00:19

Target

dd5c3c014a39f8c6e1dd66dd7bad99686d8bb31a178557cb75d3c86b563b0ac5.exe
Size

6KB
MD5

d1efab79299db1a92c736cfa0bc3917d
SHA1

26a806089c58753c3f42f1b3602598bd2adb133f
SHA256

dd5c3c014a39f8c6e1dd66dd7bad99686d8bb31a178557cb75d3c86b563b0ac5
SHA512

fa7eccd42399de62da28d1f82f3b0b62934fa246c30558972d4f3ba9c78804a4bb677577484ae3a2beed32e72794e485942b1cb5ce1ada5c6d9b7dd6282d065f
SSDEEP

48:S1bt0S4FVgCp471Ib4Fc/38+N7DYocHa23WlTpebVetFygFI5a2oxdVoZiG/9uDO:k0mIGnFc/38+N4ZHJWSY9FI5Wq8x

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2300 wrote to memory of 2280	2300	dd5c3c014a39f8c6e1dd66dd7bad99686d8bb31a178557cb75d3c86b563b0ac5.exe	28
PID 2300 wrote to memory of 2280	2300	dd5c3c014a39f8c6e1dd66dd7bad99686d8bb31a178557cb75d3c86b563b0ac5.exe	28
PID 2300 wrote to memory of 2280	2300	dd5c3c014a39f8c6e1dd66dd7bad99686d8bb31a178557cb75d3c86b563b0ac5.exe	28

C:\Users\Admin\AppData\Local\Temp\dd5c3c014a39f8c6e1dd66dd7bad99686d8bb31a178557cb75d3c86b563b0ac5.exe
"C:\Users\Admin\AppData\Local\Temp\dd5c3c014a39f8c6e1dd66dd7bad99686d8bb31a178557cb75d3c86b563b0ac5.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2300
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2300 -s 32
  2⤵
  PID:2280