4639dfbd35d2d98a8b6baf849e3ee410be7d995382699aaea429e5dab11ab05f

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
24/12/2023, 00:49

Target

4639dfbd35d2d98a8b6baf849e3ee410be7d995382699aaea429e5dab11ab05f.exe
Size

6KB
MD5

d365ea698830bfa6227f8a6eb401ea8f
SHA1

f2b1b5ddae2834427c4490e5fc26346b7b8e7e67
SHA256

4639dfbd35d2d98a8b6baf849e3ee410be7d995382699aaea429e5dab11ab05f
SHA512

7d41c788d0acc49aab496c4820fce318694ed6f75483ec7373f3b99d99dfc0f0a3e993011c746bd1317a9ba2f01d92b125338d320f47e2d62a42e9fa61a6e7b8
SSDEEP

48:Sjbt0S4FVgCp471Ib4Fc/38+N7DYocHa23WlTpebVetFygFI5a2oxdVoZiG/9uTO:y0mIGnFc/38+N4ZHJWSY9FI5Wqsx

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2036 wrote to memory of 2116	2036	4639dfbd35d2d98a8b6baf849e3ee410be7d995382699aaea429e5dab11ab05f.exe	14
PID 2036 wrote to memory of 2116	2036	4639dfbd35d2d98a8b6baf849e3ee410be7d995382699aaea429e5dab11ab05f.exe	14
PID 2036 wrote to memory of 2116	2036	4639dfbd35d2d98a8b6baf849e3ee410be7d995382699aaea429e5dab11ab05f.exe	14

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 2036 -s 32
1⤵
PID:2116

C:\Users\Admin\AppData\Local\Temp\4639dfbd35d2d98a8b6baf849e3ee410be7d995382699aaea429e5dab11ab05f.exe
"C:\Users\Admin\AppData\Local\Temp\4639dfbd35d2d98a8b6baf849e3ee410be7d995382699aaea429e5dab11ab05f.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2036