73e06d093febb92e80354f8dc65eff57491069a042dd8ed9544aaf469fd74955

Analysis

max time kernel
122s
max time network
127s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
13-02-2024 05:32

Target

73e06d093febb92e80354f8dc65eff57491069a042dd8ed9544aaf469fd74955.exe
Size

6KB
MD5

0780d24f85810db1da16948d72d9972d
SHA1

5bdf0f36e7761e5c0ce5b5889537318cc87eb3b4
SHA256

73e06d093febb92e80354f8dc65eff57491069a042dd8ed9544aaf469fd74955
SHA512

88d72738f8a19e2a481aedfc79f3359b570ec96251de50522f340131e5ac5e7712595fd9f82f5e5dcf6a19f1bbf109a07aebd99963623ab38327020c049c37dd
SSDEEP

48:Svbt0S4FVgCp471Ib4Fc/38+N7DYocHa23WlTpebVetFygFI5a2oxdVoZiG/9urg:e0mIGnFc/38+N4ZHJWSY9FI5Wq2x

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2416 wrote to memory of 2360	2416	73e06d093febb92e80354f8dc65eff57491069a042dd8ed9544aaf469fd74955.exe	28
PID 2416 wrote to memory of 2360	2416	73e06d093febb92e80354f8dc65eff57491069a042dd8ed9544aaf469fd74955.exe	28
PID 2416 wrote to memory of 2360	2416	73e06d093febb92e80354f8dc65eff57491069a042dd8ed9544aaf469fd74955.exe	28

C:\Users\Admin\AppData\Local\Temp\73e06d093febb92e80354f8dc65eff57491069a042dd8ed9544aaf469fd74955.exe
"C:\Users\Admin\AppData\Local\Temp\73e06d093febb92e80354f8dc65eff57491069a042dd8ed9544aaf469fd74955.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2416
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2416 -s 32
  2⤵
  PID:2360