5e7609e3016eb92f0c1c4118a0c5c2bcb74a09ba5b7d6f75db68970119683799

Analysis

max time kernel
92s
max time network
129s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
24/02/2024, 20:42

Target

a2b5bbf1fa19160f671de980c71458b9.exe
Size

368KB
MD5

a2b5bbf1fa19160f671de980c71458b9
SHA1

e000a468a5c029ac156bc483668ddf15e1b5c198
SHA256

5e7609e3016eb92f0c1c4118a0c5c2bcb74a09ba5b7d6f75db68970119683799
SHA512

56bf1fa652ceb6f6366c66546d42d89926f72f12f97353bf7309c24a1fd0c240f868b84342c5624bc734bf524db75e853483047ec93339821205e72e7f45f2cd
SSDEEP

6144:d8cL5nzdHT6Z1iV26cqG9xWjXbH63/HmhN3GlFblOS:bRzZTSR6zWxK+PAN2BOS

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2376 set thread context of 1972	2376	a2b5bbf1fa19160f671de980c71458b9.exe	85

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4476	1972	WerFault.exe	85

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 2376 wrote to memory of 1972	2376	a2b5bbf1fa19160f671de980c71458b9.exe	85
PID 2376 wrote to memory of 1972	2376	a2b5bbf1fa19160f671de980c71458b9.exe	85
PID 2376 wrote to memory of 1972	2376	a2b5bbf1fa19160f671de980c71458b9.exe	85
PID 2376 wrote to memory of 1972	2376	a2b5bbf1fa19160f671de980c71458b9.exe	85
PID 2376 wrote to memory of 1972	2376	a2b5bbf1fa19160f671de980c71458b9.exe	85

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1972 -ip 1972
1⤵
PID:1912

memory/1972-2-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/1972-4-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/2376-0-0x0000000063400000-0x000000006345F000-memory.dmp

Filesize
380KB

Download
memory/2376-1-0x00000000022A0000-0x00000000022A1000-memory.dmp

Filesize
4KB

Download
memory/2376-5-0x0000000063400000-0x000000006345F000-memory.dmp

Filesize
380KB

Download