eb5256415f9843acebdc79f0eff12217675ccb5db725c982dcfa6f71cc0ed756

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
10/03/2024, 00:57

Target

eb5256415f9843acebdc79f0eff12217675ccb5db725c982dcfa6f71cc0ed756.exe
Size

6KB
MD5

5895f2d2c695ed02a79741345a62410d
SHA1

9646246b58038873e62a8e82d4635612675bcc40
SHA256

eb5256415f9843acebdc79f0eff12217675ccb5db725c982dcfa6f71cc0ed756
SHA512

18d873dd775bc98ed775faab078894121585b32c095faa3dcbef78052a473d1c29dc8a468bff9e0cfce7ca5cd8da755f5c678348ae0e2d7fdbba65203933a48d
SSDEEP

48:S6bt0S4FVgCp471Ib4Fc/38+N7DYocHa23WlTpebVetFygFI5a2oxdVoZiG/9uvO:H0mIGnFc/38+N4ZHJWSY9FI5WqAx

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2240 wrote to memory of 2244	2240	eb5256415f9843acebdc79f0eff12217675ccb5db725c982dcfa6f71cc0ed756.exe	28
PID 2240 wrote to memory of 2244	2240	eb5256415f9843acebdc79f0eff12217675ccb5db725c982dcfa6f71cc0ed756.exe	28
PID 2240 wrote to memory of 2244	2240	eb5256415f9843acebdc79f0eff12217675ccb5db725c982dcfa6f71cc0ed756.exe	28

C:\Users\Admin\AppData\Local\Temp\eb5256415f9843acebdc79f0eff12217675ccb5db725c982dcfa6f71cc0ed756.exe
"C:\Users\Admin\AppData\Local\Temp\eb5256415f9843acebdc79f0eff12217675ccb5db725c982dcfa6f71cc0ed756.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2240
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2240 -s 32
  2⤵
  PID:2244