6887a011a50a7d456068aecba506feb3db57be4710d190141a60afa00d5aa97a

Analysis

max time kernel
118s
max time network
140s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
15/04/2024, 09:42

Target

Generators PACK/Generators PACK/TSP Dork generator v8.0/Data/TSP.exe
Size

416KB
MD5

8f8ff6b696859c3afe7936c345b098bd
SHA1

9bb88f703e234a89ff523514a5c676ac12ae6225
SHA256

9cd46027d63c36e53f4347d43554336c2ea050d38be3ff9a608cb94cca6ab74b
SHA512

7817186633c86f95409213994b458937cc56eae49265db3051d061c9ddda1421acccf38f70f6c92ff782936c75420713842a62de4f62cf17a6cd6fc1dc7d1164
SSDEEP

3072:KpDlT1fcjwpur6aIT2j1m53+3ZuzLiA9V+KUnOoJddibbJb/Fs+c6CUiAsC57Cex:TJmZdLi/nOkrcsU7CRLi/nOkrccU3C

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2508 wrote to memory of 2728	2508	TSP.exe	30
PID 2508 wrote to memory of 2728	2508	TSP.exe	30
PID 2508 wrote to memory of 2728	2508	TSP.exe	30

C:\Users\Admin\AppData\Local\Temp\Generators PACK\Generators PACK\TSP Dork generator v8.0\Data\TSP.exe
"C:\Users\Admin\AppData\Local\Temp\Generators PACK\Generators PACK\TSP Dork generator v8.0\Data\TSP.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2508
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2508 -s 648
  2⤵
  PID:2728

memory/2508-0-0x0000000000950000-0x00000000009BE000-memory.dmp

Filesize
440KB

Download
memory/2508-1-0x000007FEF5310000-0x000007FEF5CFC000-memory.dmp

Filesize
9.9MB

Download
memory/2508-2-0x000000001B160000-0x000000001B1E0000-memory.dmp

Filesize
512KB

Download
memory/2508-3-0x000000001B160000-0x000000001B1E0000-memory.dmp

Filesize
512KB

Download
memory/2508-4-0x000000001B160000-0x000000001B1E0000-memory.dmp

Filesize
512KB

Download
memory/2508-5-0x000007FEF5310000-0x000007FEF5CFC000-memory.dmp

Filesize
9.9MB

Download
memory/2508-6-0x000000001B160000-0x000000001B1E0000-memory.dmp

Filesize
512KB

Download
memory/2508-7-0x000000001B160000-0x000000001B1E0000-memory.dmp

Filesize
512KB

Download