3af33e7c6fb9a44b5fe52d1c8e7985ae1534cfbf319c8817f4cd33422be79e51

Analysis

max time kernel
118s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/01/2024, 08:35

Target

3af33e7c6fb9a44b5fe52d1c8e7985ae1534cfbf319c8817f4cd33422be79e51.exe
Size

6KB
MD5

f9dad07287439461cf240504f18408ca
SHA1

2954db8e7a05bcf6208626296c412ed9f0b0426d
SHA256

3af33e7c6fb9a44b5fe52d1c8e7985ae1534cfbf319c8817f4cd33422be79e51
SHA512

5449f8220b54031ad006d319a130537493b8b6ff1f80a659d8cd0fe99040b9c46a8982b11abc3b8c42c0a2bc0cb7e4ddf4947b62826e5a6b60456e4fffdbadfc
SSDEEP

48:SZbt0S4FVgCp471Ib4Fc/38+N7DYocHa23WlTpebVetFygFI5a2oxdVoZiG/9uxO:M0mIGnFc/38+N4ZHJWSY9FI5Wqax

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2312 wrote to memory of 2348	2312	3af33e7c6fb9a44b5fe52d1c8e7985ae1534cfbf319c8817f4cd33422be79e51.exe	28
PID 2312 wrote to memory of 2348	2312	3af33e7c6fb9a44b5fe52d1c8e7985ae1534cfbf319c8817f4cd33422be79e51.exe	28
PID 2312 wrote to memory of 2348	2312	3af33e7c6fb9a44b5fe52d1c8e7985ae1534cfbf319c8817f4cd33422be79e51.exe	28

C:\Users\Admin\AppData\Local\Temp\3af33e7c6fb9a44b5fe52d1c8e7985ae1534cfbf319c8817f4cd33422be79e51.exe
"C:\Users\Admin\AppData\Local\Temp\3af33e7c6fb9a44b5fe52d1c8e7985ae1534cfbf319c8817f4cd33422be79e51.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2312
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2312 -s 32
  2⤵
  PID:2348