b7d64ba503f7065003da88a893574ad9356eb8838342440dea5cb56972ca0053

Analysis

max time kernel
120s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
23-02-2024 15:36

Target

b7d64ba503f7065003da88a893574ad9356eb8838342440dea5cb56972ca0053.exe
Size

6KB
MD5

f08521c7846871eb7bfac6908219ecc2
SHA1

1a91646634b3c8b51c9a3b02800c965b9d5a1d70
SHA256

b7d64ba503f7065003da88a893574ad9356eb8838342440dea5cb56972ca0053
SHA512

f0fd6db366e8deee74d1613aaa47fc79d2d03ae5d8480eb36163a9fcc75005b6e94dd040aa1489e56dd432c64c1605724081f638ad341cd7bd356578c5055f6d
SSDEEP

48:Svbt0S4FVgCp471Ib4Fc/38+N7DYocHa23WlTpebVetFygFI5a2oxdVoZiG/9unO:q0mIGnFc/38+N4ZHJWSY9FI5Wq4x

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2376 wrote to memory of 2500	2376	b7d64ba503f7065003da88a893574ad9356eb8838342440dea5cb56972ca0053.exe	28
PID 2376 wrote to memory of 2500	2376	b7d64ba503f7065003da88a893574ad9356eb8838342440dea5cb56972ca0053.exe	28
PID 2376 wrote to memory of 2500	2376	b7d64ba503f7065003da88a893574ad9356eb8838342440dea5cb56972ca0053.exe	28

C:\Users\Admin\AppData\Local\Temp\b7d64ba503f7065003da88a893574ad9356eb8838342440dea5cb56972ca0053.exe
"C:\Users\Admin\AppData\Local\Temp\b7d64ba503f7065003da88a893574ad9356eb8838342440dea5cb56972ca0053.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2376
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2376 -s 32
  2⤵
  PID:2500