98a8aa83471e79c3f5ce1f151a2eeca4d9d3a8894a645eac03ca7ebf28d159d0

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
26-01-2024 18:32

Target

98a8aa83471e79c3f5ce1f151a2eeca4d9d3a8894a645eac03ca7ebf28d159d0.exe
Size

6KB
MD5

4efb31fd9c03e0169aabd1f9e99fa50e
SHA1

b80fcfb71eec8fa4efb76bd53771def0b6941620
SHA256

98a8aa83471e79c3f5ce1f151a2eeca4d9d3a8894a645eac03ca7ebf28d159d0
SHA512

11c3256d53036b100fb13b5ad1dd1bef9179b281f19432a1fd56a67cad953113d23932b34bb03d9434fd837b87bcb80133abf03bffa6cfbcd8fed608eaf5947b
SSDEEP

48:SObt0S4FVgCp471Ib4Fc/38+N7DYocHa23WlTpebVetFygFI5a2oxdVoZiG/9upO:70mIGnFc/38+N4ZHJWSY9FI5Wqix

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3028 wrote to memory of 2272	3028	98a8aa83471e79c3f5ce1f151a2eeca4d9d3a8894a645eac03ca7ebf28d159d0.exe	11
PID 3028 wrote to memory of 2272	3028	98a8aa83471e79c3f5ce1f151a2eeca4d9d3a8894a645eac03ca7ebf28d159d0.exe	11
PID 3028 wrote to memory of 2272	3028	98a8aa83471e79c3f5ce1f151a2eeca4d9d3a8894a645eac03ca7ebf28d159d0.exe	11

C:\Users\Admin\AppData\Local\Temp\98a8aa83471e79c3f5ce1f151a2eeca4d9d3a8894a645eac03ca7ebf28d159d0.exe
"C:\Users\Admin\AppData\Local\Temp\98a8aa83471e79c3f5ce1f151a2eeca4d9d3a8894a645eac03ca7ebf28d159d0.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3028
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 3028 -s 32
  2⤵
  PID:2272