786616de64eb889dcc7b4eb390b7e21b087eba4ca9ae994b862db6a0a749911e

Analysis

max time kernel
148s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
06/03/2024, 20:55

Target

b82b2a14d65c40a2eaa45841f68780d2.exe
Size

172KB
MD5

b82b2a14d65c40a2eaa45841f68780d2
SHA1

979d1534545727936a299fd4dd1c9ab87667ac31
SHA256

786616de64eb889dcc7b4eb390b7e21b087eba4ca9ae994b862db6a0a749911e
SHA512

4ab357d5d21f86f938f0121d4651bb800c090ba3a7221cba6c2b75259286169bc39e6de6655664d45a593e7afcd319333e2c165a1ef21f9257613a8533ff15f5
SSDEEP

3072:s46FG9rHQcpKP6T0xfX6vD3jrgA2PzjOD3VU6U6Djx1lVbSvlbP7Jwn+:sTg98c066X4DX2bjvIZ1l8vFP7JM+

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 400 set thread context of 3832	400	b82b2a14d65c40a2eaa45841f68780d2.exe	91

Program crash 1 IoCs

pid	pid_target	Process	procid_target
972	3832	WerFault.exe	91

Suspicious use of WriteProcessMemory 9 IoCs

description	pid	Process	procid_target
PID 400 wrote to memory of 3832	400	b82b2a14d65c40a2eaa45841f68780d2.exe	91
PID 400 wrote to memory of 3832	400	b82b2a14d65c40a2eaa45841f68780d2.exe	91
PID 400 wrote to memory of 3832	400	b82b2a14d65c40a2eaa45841f68780d2.exe	91
PID 400 wrote to memory of 3832	400	b82b2a14d65c40a2eaa45841f68780d2.exe	91
PID 400 wrote to memory of 3832	400	b82b2a14d65c40a2eaa45841f68780d2.exe	91
PID 400 wrote to memory of 3832	400	b82b2a14d65c40a2eaa45841f68780d2.exe	91
PID 400 wrote to memory of 3832	400	b82b2a14d65c40a2eaa45841f68780d2.exe	91
PID 400 wrote to memory of 3832	400	b82b2a14d65c40a2eaa45841f68780d2.exe	91
PID 400 wrote to memory of 3832	400	b82b2a14d65c40a2eaa45841f68780d2.exe	91

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 3832 -ip 3832
1⤵
PID:4688

memory/400-5-0x0000000000400000-0x0000000000431000-memory.dmp

Filesize
196KB

Download
memory/3832-0-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download
memory/3832-2-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download
memory/3832-1-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download
memory/3832-4-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download
memory/3832-6-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download