c15427a19da1db7b3f9e9544db6eceae3fc30c42d570fa8d56728db6cd6c5c22

Analysis

max time kernel
120s
max time network
145s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
27/10/2023, 08:44

Target

Bread.and.Fred-GoldBerg/Bread&Fred_Data/Plugins/x86/lib_burst_generated.dll
Size

139KB
MD5

ffd1903fccfcfa804324f47935dd3176
SHA1

d297a264a67817ebe34ab1341a46b83bd0d94705
SHA256

f1d79bc8f0e4543029fce611e6ec0927d086e8d7c1959563fa5296ed54271786
SHA512

e6fc69a8bead7575ed7fa418cc2c49dffc924f15aa6b9efc97cb5b17d341ed4eaacfa9c0b5eb02ea380d114f9e7ab5586a50786fc840487a718f22641c603bd1
SSDEEP

3072:TQuiPMG5JzMYxbs9RXX6I0X/Y7tqnS4/QJzxxvhPU1xHWis:Va42s9RXXogZqmxxvhQts

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1452	2344	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2364 wrote to memory of 2344	2364	rundll32.exe	28
PID 2364 wrote to memory of 2344	2364	rundll32.exe	28
PID 2364 wrote to memory of 2344	2364	rundll32.exe	28
PID 2364 wrote to memory of 2344	2364	rundll32.exe	28
PID 2364 wrote to memory of 2344	2364	rundll32.exe	28
PID 2364 wrote to memory of 2344	2364	rundll32.exe	28
PID 2364 wrote to memory of 2344	2364	rundll32.exe	28
PID 2344 wrote to memory of 1452	2344	rundll32.exe	29
PID 2344 wrote to memory of 1452	2344	rundll32.exe	29
PID 2344 wrote to memory of 1452	2344	rundll32.exe	29
PID 2344 wrote to memory of 1452	2344	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Bread.and.Fred-GoldBerg\Bread&Fred_Data\Plugins\x86\lib_burst_generated.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2364
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\Bread.and.Fred-GoldBerg\Bread&Fred_Data\Plugins\x86\lib_burst_generated.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2344
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2344 -s 224
    3⤵
    - Program crash
    PID:1452