90e1d50a6d04d91f8edf0a9659e5407f866698b4be17db4b823035fe932249f8

Analysis

max time kernel
91s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
22/01/2024, 15:00

Target

6fb9daf957d41a031b52772c99365638.exe
Size

152KB
MD5

6fb9daf957d41a031b52772c99365638
SHA1

99578f8eee5c8148a379392266978468dbe07442
SHA256

90e1d50a6d04d91f8edf0a9659e5407f866698b4be17db4b823035fe932249f8
SHA512

60868cb0e373d7af0fb4cd19e89fbfe6a0b454ea9b0571ff3f3c9cf39a226628db12175d037c8e6c55a792873b475c0af09cd1e6f3d270435a2a5632a4a9bfcd
SSDEEP

1536:THJhfJN2eSkMKd1wtZTmmfAaa7qdWz+lbsN2uZNoUmDs6YHFJJ:Dd1wtZT9fLWz+lbsWWHFJJ

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1156 set thread context of 1052	1156	6fb9daf957d41a031b52772c99365638.exe	89

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3036	1052	WerFault.exe	89

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 1156 wrote to memory of 1052	1156	6fb9daf957d41a031b52772c99365638.exe	89
PID 1156 wrote to memory of 1052	1156	6fb9daf957d41a031b52772c99365638.exe	89
PID 1156 wrote to memory of 1052	1156	6fb9daf957d41a031b52772c99365638.exe	89
PID 1156 wrote to memory of 1052	1156	6fb9daf957d41a031b52772c99365638.exe	89
PID 1156 wrote to memory of 1052	1156	6fb9daf957d41a031b52772c99365638.exe	89
PID 1156 wrote to memory of 1052	1156	6fb9daf957d41a031b52772c99365638.exe	89
PID 1156 wrote to memory of 1052	1156	6fb9daf957d41a031b52772c99365638.exe	89
PID 1156 wrote to memory of 1052	1156	6fb9daf957d41a031b52772c99365638.exe	89

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 1052 -ip 1052
1⤵
PID:4596

memory/1052-0-0x0000000000400000-0x000000000040F000-memory.dmp

Filesize
60KB

Download