3294369dc96bea48f5c14632399b60f34351c366d66220cc7321cfe785b8f1fb

Analysis

max time kernel
121s
max time network
126s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
12/10/2023, 07:32

Target

3294369dc96bea48f5c14632399b60f34351c366d66220cc7321cfe785b8f1fb.exe
Size

6KB
MD5

795f7e54713d0383597de28ac7c0be15
SHA1

c6f23937269663b2a9415cbf9aa2c6262f5fb647
SHA256

3294369dc96bea48f5c14632399b60f34351c366d66220cc7321cfe785b8f1fb
SHA512

a654c2372503faa834d418dd8daf33b2ba0fa799fd4104174c838d22370e57edf05bfe763872d11e41de4e22725ab383b3e9d55faefa4f7168faa53200d17a2c
SSDEEP

48:SAbt0S4FVgCp471Ib4Fc/38+N7DYocHa23WlTpebVetFygFI5a2oxdVoZiG/9udO:10mIGnFc/38+N4ZHJWSY9FI5WqGx

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1080 wrote to memory of 2232	1080	3294369dc96bea48f5c14632399b60f34351c366d66220cc7321cfe785b8f1fb.exe	28
PID 1080 wrote to memory of 2232	1080	3294369dc96bea48f5c14632399b60f34351c366d66220cc7321cfe785b8f1fb.exe	28
PID 1080 wrote to memory of 2232	1080	3294369dc96bea48f5c14632399b60f34351c366d66220cc7321cfe785b8f1fb.exe	28

C:\Users\Admin\AppData\Local\Temp\3294369dc96bea48f5c14632399b60f34351c366d66220cc7321cfe785b8f1fb.exe
"C:\Users\Admin\AppData\Local\Temp\3294369dc96bea48f5c14632399b60f34351c366d66220cc7321cfe785b8f1fb.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1080
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 1080 -s 32
  2⤵
  PID:2232