7de89fb16ce5ee15c0e08f2bda92f7b1959a4e6d8c9a3f08dd71d283b166d2a8

Analysis

max time kernel
162s
max time network
182s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
30-12-2023 06:04

Target

10a19a24b85b92b6db99e621ced3105f.exe
Size

75KB
MD5

10a19a24b85b92b6db99e621ced3105f
SHA1

05f343db557a45acd10d48de0e30f9d5c56b66c8
SHA256

7de89fb16ce5ee15c0e08f2bda92f7b1959a4e6d8c9a3f08dd71d283b166d2a8
SHA512

e618b75991b784eecfb676922702580110dbe23baa9b426adcad244ca610104092550ee0155c991721dd28b0f6d38447c0e3280de90d0bb69d76142c542fdbbb
SSDEEP

1536:MMH4MuWfzzeI0HBIfqW8jJVY+6XFN0Giz4cPu7soOU:oMtfPeI2OtYSXFN0G24Wfs

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2920 set thread context of 3136	2920	10a19a24b85b92b6db99e621ced3105f.exe	90

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3080	3136	WerFault.exe	90

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2920 wrote to memory of 3136	2920	10a19a24b85b92b6db99e621ced3105f.exe	90
PID 2920 wrote to memory of 3136	2920	10a19a24b85b92b6db99e621ced3105f.exe	90
PID 2920 wrote to memory of 3136	2920	10a19a24b85b92b6db99e621ced3105f.exe	90
PID 2920 wrote to memory of 3136	2920	10a19a24b85b92b6db99e621ced3105f.exe	90
PID 2920 wrote to memory of 3136	2920	10a19a24b85b92b6db99e621ced3105f.exe	90
PID 2920 wrote to memory of 3136	2920	10a19a24b85b92b6db99e621ced3105f.exe	90
PID 2920 wrote to memory of 3136	2920	10a19a24b85b92b6db99e621ced3105f.exe	90

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3136 -ip 3136
1⤵
PID:4880

memory/2920-3-0x0000000001EE0000-0x0000000001EF9000-memory.dmp

Filesize
100KB

Download
memory/3136-0-0x0000000000400000-0x0000000000480000-memory.dmp

Filesize
512KB

Download
memory/3136-1-0x0000000000400000-0x0000000000480000-memory.dmp

Filesize
512KB

Download