ac104dc99278e32d16f1394f036266fd2099ede4f434a4bb8747ee6083886756

Analysis

max time kernel
123s
max time network
130s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
03/02/2024, 01:02

Target

ac104dc99278e32d16f1394f036266fd2099ede4f434a4bb8747ee6083886756.exe
Size

948KB
MD5

e79c1cd8fe2a654d9203da8979f384f9
SHA1

d79e85ba7ccc1488a3d2e2c87127ee9ebbe87181
SHA256

ac104dc99278e32d16f1394f036266fd2099ede4f434a4bb8747ee6083886756
SHA512

872e2733fde06aa1bdf13e291b1b7f041dcc48883075c7a7253e731460d8151380a916b2ed4627c5354d6446c4258aca4686c1716d37ce59064d1ebf709475e9
SSDEEP

12288:M7p8scw3hjj/Ajj/ujj/ujj/1oyt/Jsgm5J3xUjj/:DOjj/Ajj/ujj/ujj/20zCJ3xUjj/

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1948 wrote to memory of 2696	1948	ac104dc99278e32d16f1394f036266fd2099ede4f434a4bb8747ee6083886756.exe	28
PID 1948 wrote to memory of 2696	1948	ac104dc99278e32d16f1394f036266fd2099ede4f434a4bb8747ee6083886756.exe	28
PID 1948 wrote to memory of 2696	1948	ac104dc99278e32d16f1394f036266fd2099ede4f434a4bb8747ee6083886756.exe	28

C:\Users\Admin\AppData\Local\Temp\ac104dc99278e32d16f1394f036266fd2099ede4f434a4bb8747ee6083886756.exe
"C:\Users\Admin\AppData\Local\Temp\ac104dc99278e32d16f1394f036266fd2099ede4f434a4bb8747ee6083886756.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1948
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 1948 -s 708
  2⤵
  PID:2696

memory/1948-0-0x0000000000A40000-0x0000000000B32000-memory.dmp

Filesize
968KB

Download
memory/1948-1-0x000007FEF5060000-0x000007FEF5A4C000-memory.dmp

Filesize
9.9MB

Download
memory/1948-2-0x00000000001A0000-0x00000000001F8000-memory.dmp

Filesize
352KB

Download
memory/1948-3-0x000000001B450000-0x000000001B4D0000-memory.dmp

Filesize
512KB

Download
memory/1948-4-0x000007FEF5060000-0x000007FEF5A4C000-memory.dmp

Filesize
9.9MB

Download
memory/1948-5-0x000000001B450000-0x000000001B4D0000-memory.dmp

Filesize
512KB

Download