eef6afe7216ef99ae09caa68a104ef1bc418d00d576a1576e91b8f32b38298c3

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231023-en
resource tags

arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
submitted
21/11/2023, 18:57

Target

eef6afe7216ef99ae09caa68a104ef1bc418d00d576a1576e91b8f32b38298c3.exe
Size

6KB
MD5

76ee5645ddb9d4690379b04f7e4ccdff
SHA1

1e22e6b7b6540bc48832e9e11c10e3bacd672412
SHA256

eef6afe7216ef99ae09caa68a104ef1bc418d00d576a1576e91b8f32b38298c3
SHA512

0fb5fc45af0a5ff137f0963251721e817f4713a2d412a202aee43ea6d0bf08191c7f317c98ebcff749da41263a7073b1b84b69aa3c877ea7db37015252b1cd80
SSDEEP

48:SXbt0S4FVgCp471Ib4Fc/38+N7DYocHa23WlTpebVetFygFI5a2oxdVoZiG/9u2O:y0mIGnFc/38+N4ZHJWSY9FI5WqPx

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2232 wrote to memory of 1624	2232	eef6afe7216ef99ae09caa68a104ef1bc418d00d576a1576e91b8f32b38298c3.exe	28
PID 2232 wrote to memory of 1624	2232	eef6afe7216ef99ae09caa68a104ef1bc418d00d576a1576e91b8f32b38298c3.exe	28
PID 2232 wrote to memory of 1624	2232	eef6afe7216ef99ae09caa68a104ef1bc418d00d576a1576e91b8f32b38298c3.exe	28

C:\Users\Admin\AppData\Local\Temp\eef6afe7216ef99ae09caa68a104ef1bc418d00d576a1576e91b8f32b38298c3.exe
"C:\Users\Admin\AppData\Local\Temp\eef6afe7216ef99ae09caa68a104ef1bc418d00d576a1576e91b8f32b38298c3.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2232
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2232 -s 32
  2⤵
  PID:1624