33b89e3148a15860a096c8a28dc89e27b1c931d8451120506c4f7c25d25cb5c4

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26-01-2024 23:35

Target

33b89e3148a15860a096c8a28dc89e27b1c931d8451120506c4f7c25d25cb5c4.exe
Size

6KB
MD5

1c5dbdffdfe4c43029bda386a2c797a6
SHA1

e75d884ac28e65e15aaad7d427950f1311f058d9
SHA256

33b89e3148a15860a096c8a28dc89e27b1c931d8451120506c4f7c25d25cb5c4
SHA512

71361df43c2c47f29d24b4bbe4826a367d9bef3457a5eefad621735383d207ceff598e99c4e24552fcc688a3880f3e77bee51322a827de6ffcd022175b97ba96
SSDEEP

48:STpbt0S4FVgCp471Ib4Fc/38+N7DYocHa23WlTpebVetFygFI5a2oxdVoZiG/9up:sB0mIGnFc/38+N4ZHJWSY9FI5Wqrx

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2212 wrote to memory of 2180	2212	33b89e3148a15860a096c8a28dc89e27b1c931d8451120506c4f7c25d25cb5c4.exe	28
PID 2212 wrote to memory of 2180	2212	33b89e3148a15860a096c8a28dc89e27b1c931d8451120506c4f7c25d25cb5c4.exe	28
PID 2212 wrote to memory of 2180	2212	33b89e3148a15860a096c8a28dc89e27b1c931d8451120506c4f7c25d25cb5c4.exe	28

C:\Users\Admin\AppData\Local\Temp\33b89e3148a15860a096c8a28dc89e27b1c931d8451120506c4f7c25d25cb5c4.exe
"C:\Users\Admin\AppData\Local\Temp\33b89e3148a15860a096c8a28dc89e27b1c931d8451120506c4f7c25d25cb5c4.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2212
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2212 -s 32
  2⤵
  PID:2180