ef124cf26c5bf40de1051ef2fa9c397fbe457aa961dc40886250827c2ad74d44

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
24-02-2024 10:04

Target

Turb0z's Simple Mutli Hack [ESP_ Triggerbot_ Aimbot]/msvcr120d.dll
Size

1.7MB
MD5

3a285feb516e97b0d58c1634acd19431
SHA1

02c5b342ce3057ec8e528b3710bb3801e3ee9dab
SHA256

84bc7d0ddf835bbcc1cd6cc59f2daf23215db42b1ea6c1b9d450490408e5d36b
SHA512

b432991bd174eae10fa155e139cc0d06a82119b7a34c744f3a5a8661e4d7b1fc5b81e06833808b10372e9105d705436dd499e55c7b5127fa253d8a21c43c8706
SSDEEP

24576:ORUo0F7qe5IKP+kHLlU5uhk/z/cFGdLqRp+dcF/9RjJpkbV9eblglZqAntrJzyoH:Vo0RhkIsd2RZ1syglomXOtZuF

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2224	2748	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 3028 wrote to memory of 2748	3028	rundll32.exe	28
PID 3028 wrote to memory of 2748	3028	rundll32.exe	28
PID 3028 wrote to memory of 2748	3028	rundll32.exe	28
PID 3028 wrote to memory of 2748	3028	rundll32.exe	28
PID 3028 wrote to memory of 2748	3028	rundll32.exe	28
PID 3028 wrote to memory of 2748	3028	rundll32.exe	28
PID 3028 wrote to memory of 2748	3028	rundll32.exe	28
PID 2748 wrote to memory of 2224	2748	rundll32.exe	29
PID 2748 wrote to memory of 2224	2748	rundll32.exe	29
PID 2748 wrote to memory of 2224	2748	rundll32.exe	29
PID 2748 wrote to memory of 2224	2748	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Turb0z's Simple Mutli Hack [ESP_ Triggerbot_ Aimbot]\msvcr120d.dll",#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3028
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Turb0z's Simple Mutli Hack [ESP_ Triggerbot_ Aimbot]\msvcr120d.dll",#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2748
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2748 -s 220
    3⤵
    - Program crash
    PID:2224