3ac560c40ce66c165ac89632dc90776bae0b0ae48cf29a209d3690808ffe2c03

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
12-01-2024 09:31

Target

3ac560c40ce66c165ac89632dc90776bae0b0ae48cf29a209d3690808ffe2c03.exe
Size

1.3MB
MD5

cf694f8e585860b0f90edb5759402971
SHA1

5de70091848f1a0e26ce23ed02fcee67c75f08be
SHA256

3ac560c40ce66c165ac89632dc90776bae0b0ae48cf29a209d3690808ffe2c03
SHA512

fecd36ad034a3611a2917cebfdfd41de1ab8107e790c4d98c317d2ba636ca612953d73ee5515ebe59cc5fd5c182c3c9a5b3a34c0d79b2177d148ca0afd96d76b
SSDEEP

24576:r1poES8QvAfsDaeSE1esTADSVXT5XIy6ya:wES8QvAAaORXT5X561

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3032 wrote to memory of 2108	3032	3ac560c40ce66c165ac89632dc90776bae0b0ae48cf29a209d3690808ffe2c03.exe	28
PID 3032 wrote to memory of 2108	3032	3ac560c40ce66c165ac89632dc90776bae0b0ae48cf29a209d3690808ffe2c03.exe	28
PID 3032 wrote to memory of 2108	3032	3ac560c40ce66c165ac89632dc90776bae0b0ae48cf29a209d3690808ffe2c03.exe	28

C:\Users\Admin\AppData\Local\Temp\3ac560c40ce66c165ac89632dc90776bae0b0ae48cf29a209d3690808ffe2c03.exe
"C:\Users\Admin\AppData\Local\Temp\3ac560c40ce66c165ac89632dc90776bae0b0ae48cf29a209d3690808ffe2c03.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3032
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 3032 -s 144
  2⤵
  PID:2108