081b2455cbf464eee43082d023137137eaf43b7a6e1f475feeb75b7cdaaa4cac

Analysis

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
17/04/2024, 01:02

Target

Sora - OpenAi v1.1/__MACOSX/libssh2.dll
Size

163KB
MD5

73f95c1b2a23be7a80aa75250b8f25ad
SHA1

20dcce600d126479bd2f0226ae4b8981ee1f147b
SHA256

ed0db696c2ae8b896eab6fd8c71e5fa4c88e6a90b98fffc354593288d59fe119
SHA512

5ee88e0b0215dc7c970e085068f24baf3d7d1df247e7ed56d052dfa20d7dfd603353f036daa0d60e1514277e27d49449fbd9708a5e1c690eb1b90699e7f0e42f
SSDEEP

3072:n0GqDrIKZruzzO3K0n/fpti2qZhZNTBf5s5G/3:n0kKNufE/fpti2qZhZNTBRsQ

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2228	1084	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2020 wrote to memory of 1084	2020	rundll32.exe	28
PID 2020 wrote to memory of 1084	2020	rundll32.exe	28
PID 2020 wrote to memory of 1084	2020	rundll32.exe	28
PID 2020 wrote to memory of 1084	2020	rundll32.exe	28
PID 2020 wrote to memory of 1084	2020	rundll32.exe	28
PID 2020 wrote to memory of 1084	2020	rundll32.exe	28
PID 2020 wrote to memory of 1084	2020	rundll32.exe	28
PID 1084 wrote to memory of 2228	1084	rundll32.exe	29
PID 1084 wrote to memory of 2228	1084	rundll32.exe	29
PID 1084 wrote to memory of 2228	1084	rundll32.exe	29
PID 1084 wrote to memory of 2228	1084	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Sora - OpenAi v1.1\__MACOSX\libssh2.dll",#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2020
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Sora - OpenAi v1.1\__MACOSX\libssh2.dll",#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1084
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 1084 -s 224
    3⤵
    - Program crash
    PID:2228