8e7ad5adc086b021f983062054b93e2ea8755ec45f58d254b13b8cab8c38fb27

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 01:08

Target

LInjector.exe
Size

5.7MB
MD5

eb598790082ec9cb03909ddc2e1decc9
SHA1

a014c6f055471ef88ea6aedd695911062da9ca54
SHA256

8e7ad5adc086b021f983062054b93e2ea8755ec45f58d254b13b8cab8c38fb27
SHA512

72c5e68d0ae93d4b13f9c844064ab3b63b6c6d3028afe5a6a1e0ee00ced9fdf5be3b0c36ac238ce4ee184ede8addd8cf4a5efa9a6ac63b2983d40567b7219dfb
SSDEEP

98304:/YBhmyyFoelNZhjjHP5SWsaTdP3AxPi72JvoVRRH6l9EaBGiDVnRnlY1vks/kqXL:smyyFRHRSWsQPQJvCvHm9EVi9RnlY1MY

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2160	2336	WerFault.exe	16

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2336 wrote to memory of 2160	2336	LInjector.exe	28
PID 2336 wrote to memory of 2160	2336	LInjector.exe	28
PID 2336 wrote to memory of 2160	2336	LInjector.exe	28
PID 2336 wrote to memory of 2160	2336	LInjector.exe	28

C:\Users\Admin\AppData\Local\Temp\LInjector.exe
"C:\Users\Admin\AppData\Local\Temp\LInjector.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2336
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2336 -s 912
  2⤵
  - Program crash
  PID:2160

memory/2336-1-0x0000000001280000-0x000000000182E000-memory.dmp

Filesize
5.7MB

Download
memory/2336-0-0x0000000074830000-0x0000000074F1E000-memory.dmp

Filesize
6.9MB

Download
memory/2336-2-0x0000000005230000-0x0000000005270000-memory.dmp

Filesize
256KB

Download
memory/2336-3-0x00000000078E0000-0x000000000820C000-memory.dmp

Filesize
9.2MB

Download
memory/2336-4-0x00000000004B0000-0x0000000000500000-memory.dmp

Filesize
320KB

Download
memory/2336-6-0x0000000000420000-0x000000000042A000-memory.dmp

Filesize
40KB

Download
memory/2336-5-0x0000000000420000-0x000000000042A000-memory.dmp

Filesize
40KB

Download
memory/2336-7-0x0000000074830000-0x0000000074F1E000-memory.dmp

Filesize
6.9MB

Download
memory/2336-8-0x0000000005230000-0x0000000005270000-memory.dmp

Filesize
256KB

Download
memory/2336-10-0x0000000000420000-0x000000000042A000-memory.dmp

Filesize
40KB

Download
memory/2336-9-0x0000000000420000-0x000000000042A000-memory.dmp

Filesize
40KB

Download