916219705ed787728156d95eb7f0104a2659a992c45fb0b97302cbe18b6e4642

Analysis

max time kernel
120s
max time network
143s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 16:07

Target

7b712f43c302040a1d898d9b4200b5c0.exe
Size

3.7MB
MD5

7b712f43c302040a1d898d9b4200b5c0
SHA1

a6b46fe6b8b8665b5db9ccf6690fdd6038b04c4e
SHA256

916219705ed787728156d95eb7f0104a2659a992c45fb0b97302cbe18b6e4642
SHA512

043cb6eab41f8d49acf2781eaf908eab3a6b9ea3340965a1c98b4165a27f87697eec4787adb3644739baee8c9fdf1dff9e0e66854f34cbd30a870ef335d44931
SSDEEP

24576:NigFtxwKT5c2ZVNDn/suNtL2ZKNTla7RNGaSWXGx0fkH8qrcGifUPfVypu:NZW/2ZV/Tla7RJVG6f5CcGKU3/

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2248 wrote to memory of 2768	2248	7b712f43c302040a1d898d9b4200b5c0.exe	28
PID 2248 wrote to memory of 2768	2248	7b712f43c302040a1d898d9b4200b5c0.exe	28
PID 2248 wrote to memory of 2768	2248	7b712f43c302040a1d898d9b4200b5c0.exe	28

C:\Users\Admin\AppData\Local\Temp\7b712f43c302040a1d898d9b4200b5c0.exe
"C:\Users\Admin\AppData\Local\Temp\7b712f43c302040a1d898d9b4200b5c0.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2248
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2248 -s 48
  2⤵
  PID:2768