99b5471cfa38e2888c216c36ea21ac8ea4993d9ba491916a426d279166121a88

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
27/03/2024, 04:02

Target

e0b807cb5916d1cb695192b6fe0fe68b.exe
Size

20KB
MD5

e0b807cb5916d1cb695192b6fe0fe68b
SHA1

00b06dcfded8d5a2c44587dc03a61a64c3126595
SHA256

99b5471cfa38e2888c216c36ea21ac8ea4993d9ba491916a426d279166121a88
SHA512

d4682e803579df74c3834bce7476f896f2f48dfa55bebb7cd1591cd3b3e35266985455b1f105f802c04c09823f40fc54bf324b395060da3300316a45c024072e
SSDEEP

384:z2xEXhc199pEcfyL01dcSgBk0MrdIRCc+8JnUUbHk5jzFh5rVpiSqutxYvkR:z2xca9PlpMdAdV98FUoWjztBA8R

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2228 set thread context of 900	2228	e0b807cb5916d1cb695192b6fe0fe68b.exe	89

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3148	900	WerFault.exe	89

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 2228 wrote to memory of 900	2228	e0b807cb5916d1cb695192b6fe0fe68b.exe	89
PID 2228 wrote to memory of 900	2228	e0b807cb5916d1cb695192b6fe0fe68b.exe	89
PID 2228 wrote to memory of 900	2228	e0b807cb5916d1cb695192b6fe0fe68b.exe	89
PID 2228 wrote to memory of 900	2228	e0b807cb5916d1cb695192b6fe0fe68b.exe	89
PID 2228 wrote to memory of 900	2228	e0b807cb5916d1cb695192b6fe0fe68b.exe	89

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 900 -ip 900
1⤵
PID:3136

C:\Users\Admin\AppData\Local\Temp\e0b807cb5916d1cb695192b6fe0fe68b.exe.tmp1

Filesize
20KB

MD5
579bcbc8115c661ebce645df5f931d20

SHA1
0ea0c2e3ea986a7a3d6ef7c936bbcd56ffdab16f

SHA256
8613f10ffa44a7567a6f773a5e205c88bd0be7ef884c56fc9cf9ce6f56a992fe

SHA512
2ec1e7ebe28c52854ebaaa93843c9cd7726472792f1158dae3b7623c591112caa3978a6caa29f2ab837c9e3be3d3504ceb335fb137628a10018af2de6000a548

Download Submit
memory/900-1-0x0000000000400000-0x0000000000405000-memory.dmp

Filesize
20KB

Download
memory/2228-0-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2228-10-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download