939a09181702d4c4abdbe59cedd0e5bcc879c0428dbff7cd2c5dbbfb2c41e6b8

Analysis

max time kernel
87s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
05-02-2024 01:43

Target

90b4d0adc5484c2a382e41f28b84b96c.exe
Size

92KB
MD5

90b4d0adc5484c2a382e41f28b84b96c
SHA1

31a571625f2d8230edfb2432f47418f7651c8d94
SHA256

939a09181702d4c4abdbe59cedd0e5bcc879c0428dbff7cd2c5dbbfb2c41e6b8
SHA512

981b41a0a2a7e42a061b155e21df97fb951cc1bc9061dfa35b6c9f7ce6e57b42815eb4d5e7c282e6e35bb1feb5d2c98ed42ff22884a4478d5b4226efb664d96f
SSDEEP

1536:vIgY3oaTmEY3bdlny8sPHvvICymQ+I/NQUUGlkQUIVez3BT3VtOZjPivB:AgY34t3plWgCyx+hlzztOiB

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

Processes:

90b4d0adc5484c2a382e41f28b84b96c.exe

description pid process target process

PID 5036 set thread context of 3948 5036 90b4d0adc5484c2a382e41f28b84b96c.exe 90b4d0adc5484c2a382e41f28b84b96c.exe
Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2556 3948 WerFault.exe 90b4d0adc5484c2a382e41f28b84b96c.exe

description	pid	process	target process
PID 5036 set thread context of 3948	5036	90b4d0adc5484c2a382e41f28b84b96c.exe	90b4d0adc5484c2a382e41f28b84b96c.exe

pid	pid_target	process	target process
2556	3948	WerFault.exe	90b4d0adc5484c2a382e41f28b84b96c.exe

Suspicious use of WriteProcessMemory 8 IoCs

Processes:

90b4d0adc5484c2a382e41f28b84b96c.exe

description	pid	process	target process
PID 5036 wrote to memory of 3948	5036	90b4d0adc5484c2a382e41f28b84b96c.exe	90b4d0adc5484c2a382e41f28b84b96c.exe
PID 5036 wrote to memory of 3948	5036	90b4d0adc5484c2a382e41f28b84b96c.exe	90b4d0adc5484c2a382e41f28b84b96c.exe
PID 5036 wrote to memory of 3948	5036	90b4d0adc5484c2a382e41f28b84b96c.exe	90b4d0adc5484c2a382e41f28b84b96c.exe
PID 5036 wrote to memory of 3948	5036	90b4d0adc5484c2a382e41f28b84b96c.exe	90b4d0adc5484c2a382e41f28b84b96c.exe
PID 5036 wrote to memory of 3948	5036	90b4d0adc5484c2a382e41f28b84b96c.exe	90b4d0adc5484c2a382e41f28b84b96c.exe
PID 5036 wrote to memory of 3948	5036	90b4d0adc5484c2a382e41f28b84b96c.exe	90b4d0adc5484c2a382e41f28b84b96c.exe
PID 5036 wrote to memory of 3948	5036	90b4d0adc5484c2a382e41f28b84b96c.exe	90b4d0adc5484c2a382e41f28b84b96c.exe
PID 5036 wrote to memory of 3948	5036	90b4d0adc5484c2a382e41f28b84b96c.exe	90b4d0adc5484c2a382e41f28b84b96c.exe

C:\Users\Admin\AppData\Local\Temp\90b4d0adc5484c2a382e41f28b84b96c.exe
"C:\Users\Admin\AppData\Local\Temp\90b4d0adc5484c2a382e41f28b84b96c.exe"
2⤵
PID:3948

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3948 -s 364
3⤵
- Program crash
PID:2556

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3948 -ip 3948
1⤵
PID:1908

memory/3948-3-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download
memory/3948-2-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download
memory/3948-1-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download
memory/3948-0-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download